Approved changes feed: RSS · Atom
cpe:2.3:a:syslog-ng:syslog-ng:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Syslog Ng (b48a3c02-b806-58c4-ae6e-1e005dce78b2) |
|---|---|
| Product | Syslog Ng (881b971a-8e1e-561f-b390-ccb569c432be) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-39879 |
vulnerable | 2026-07-29 00:46:19.530977 |
SQL injection in syslog-ng SQL destionation driver
HIGH (7.1)
Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured.
Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and syslog-ng Store Box 7.8
Published: 2026-07-20T16:57:32.019Z
Updated: 2026-07-21T16:11:18.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47619 |
vulnerable | 2026-06-08 06:48:12.951299 |
tranport: TLS host name wildcard matching too lax
HIGH (7.5)
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.
Published: 2025-05-07T15:12:02.118Z
Updated: 2025-05-28T10:03:45.900Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.