Approved changes feed: RSS · Atom
cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:premium:*:*:*
part: a version: * update: *
| Vendor | Oneidentity (9a4d59b1-0090-5ffc-a8b8-0160c7a2dcca) |
|---|---|
| Product | Syslog Ng (6c8faded-7c10-599f-ac54-28c76c28e4fa) |
| Edition | * |
| Language | * |
| Software edition | premium |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-38725 |
vulnerable | 2026-06-08 05:47:16.940831 |
Details available
An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.
Published: 2023-01-23T00:00:00.000Z
Updated: 2025-04-03T14:35:47.853Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.