Approved changes feed: RSS · Atom

cpe:2.3:a:oneidentity:syslog-ng_store_box:*:*:*:*:-:*:*:*

part: a version: * update: *

VendorOneidentity (9a4d59b1-0090-5ffc-a8b8-0160c7a2dcca)
ProductSyslog Ng Store Box (1170b600-b9bd-56fe-9589-fb6c97505c1b)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/syslog-ng purl2cpe 2026-06-01 10:11:08.986243
pkg:deb/ubuntu/syslog-ng purl2cpe 2026-06-01 10:11:08.986246
pkg:docker/balabit/syslog-ng purl2cpe 2026-06-01 10:11:08.986249
pkg:github/syslog-ng/syslog-ng purl2cpe 2026-06-01 10:11:08.986252
pkg:golang/github.com/syslog-ng/syslog-ng purl2cpe 2026-06-01 10:11:08.986255
pkg:rpm/fedora/syslog-ng purl2cpe 2026-06-01 10:11:08.986257
pkg:rpm/opensuse/syslog-ng purl2cpe 2026-06-01 10:11:08.986260
pkg:sourceforge/syslog-ng.mirror purl2cpe 2026-06-01 10:11:08.986263

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38725 vulnerable 2026-06-08 05:47:16.941480 Details available
An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.
Published: 2023-01-23T00:00:00.000Z
Updated: 2025-04-03T14:35:47.853Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.