CVE-2011-1951
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using...
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
Exploit likelihood
What each source reports
NVD Score used
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
- Record
CVE-2011-1951- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
- Record
CVE-2011-1951- Updated
- 2026-11-02
EUVDEUVD-2011-1945 No score
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
- Record
EUVD-2011-1945- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7jqv-hh4c-ww3h No score
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using...
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
- Record
GHSA-7jqv-hh4c-ww3h- Updated
- 2026-11-02
OSV No score
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
- Record
CVE-2011-1951- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1951 No score
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
- Record
DEBIAN-CVE-2011-1951- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10493-1 No score
syslog-ng-3.8.1-2.2 on GA media
These are all security issues fixed in the syslog-ng-3.8.1-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10493-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1951 is a medium vulnerability (CVSS 4.3) in Oneidentity Syslog-ng, published July 11, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.46%, the 84th percentile. Fixed in syslog-ng 3.2.4-1.
References
git.balabit.hu?p=bazsi/syslog-ng-3.2.git%3Ba=commit%3Bh=09710c0b105e579d35c7b5f6c66d1ea5e3a3d3ff
bugzilla.redhat.com/show_bug.cgi?id=709088
openwall.com/lists/oss-security/2011/05/26/1
lists.fedoraproject.org/pipermail/package-announce/2011-June/062107.html
securityfocus.com/bid/47800
secunia.com/advisories/45122