The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade syslog-ng | Mar 21, 2024 | Jan 23, 2023 |
| Debian | — | Upgrade syslog-ng | Mar 2, 2023 | Jan 23, 2023 |
| Gentoo Linux | — | Upgrade app-admin/syslog-ng. | May 4, 2023 | Jan 23, 2023 |
| Suse | — | Upgrade syslog-ng-mqttUpgrade syslog-ng-sqlUpgrade syslog-ngUpgrade libevtlog-3_35-0Upgrade syslog-ng-develUpgrade syslog-ng-javaUpgrade syslog-ng-smtpUpgrade syslog-ng-geoipUpgrade syslog-ng-redisUpgrade syslog-ng-pythonUpgrade syslog-ng-snmpUpgrade syslog-ng-curl | Feb 6, 2023 | Jan 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 23, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub