Oneidentity Syslog-ng vulnerabilities

• oneidentity syslog-ng, debian linux +1 more tranport: TLS host name wildcard matching too lax CVE-2024-47619 Fix available 7.5 HighMay 7, 2025
• oneidentity syslog-ng, syslog-ng store box +1 more CVE-2022-38725 affecting package syslog-ng for versions less than 3.33.2-7 CVE-2022-38725 Public exploitFix available 7.5 HighJanuary 23, 2023
• oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 more syslog-ng: Local privilege escalation from new to root in %post CVE-2020-8019 Fix available 7.7 HighMay 7, 2020
• oneidentity syslog-ng lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using... CVE-2011-1951 Fix available 4.3 MediumJuly 11, 2011
• oneidentity syslog-ng Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not... CVE-2011-0343 Fix available 6.9 MediumJanuary 28, 2011
• oneidentity syslog-ng syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the... CVE-2008-5110 Fix available 9.3 HighNovember 17, 2008
• oneidentity syslog-ng Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or... CVE-2002-1200 Fix available 7.5 HighOctober 15, 2002