syslog-ng vulnerabilities (Debian)
8 vulnerabilities.
-
syslog-ngDebian SQL injection in syslog-ng SQL destionation driver 7.1 High -
syslog-ngDebian tranport: TLS host name wildcard matching too lax 7.5 High -
syslog-ngDebian CVE-2022-38725 affecting package syslog-ng for versions less than 3.33.2-7 7.5 High -
syslog-ngDebian lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using... 4.3 Medium -
syslog-ngDebian Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not... 6.9 Medium -
syslog-ngDebian syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the... 9.3 High -
syslog-ngDebian Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a... 5.0 Medium -
syslog-ngDebian Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or... 7.5 High