BalaBit IT Security syslog-ng PCRE Denial of Service Vulnerability

Bugtraq ID:	47800
Class:	Input Validation Error
CVE:	CVE-2011-1951
Remote:	Yes
Local:	No
Published:	May 11 2011 12:00AM
Updated:	May 07 2015 05:18PM
Credit:	Micah Anderson
Vulnerable:	Gentoo Linux Balabit syslog-ng Open Source Edition 3.2.2 Balabit syslog-ng Open Source Edition 3.2.1 Balabit syslog-ng Open Source Edition 3.1.4 Balabit syslog-ng Open Source Edition 3.1.4 Balabit syslog-ng Open Source Edition 3.1.3 Balabit syslog-ng Open Source Edition 3.0.10 Balabit syslog-ng Open Source Edition 3.0.9 Balabit syslog-ng Open Source Edition 3.0.8 Balabit syslog-ng Open Source Edition 3.0.7 Balabit syslog-ng Open Source Edition 3.2alpha1 Balabit syslog-ng Open Source Edition 3.2.3 Balabit syslog-ng Open Source Edition 3.2
Not Vulnerable:	Balabit syslog-ng Open Source Edition 3.2.4

BalaBit IT Security syslog-ng PCRE Denial of Service Vulnerability

BalaBit IT Security syslog-ng is prone to a denial-of-service vulnerability because it fails to adequately sanitize user-supplied input.

Attackers can leverage this issue to cause denial-of-service conditions.

Versions prior to syslog-ng 3.2.4 are vulnerable.

BalaBit IT Security syslog-ng PCRE Denial of Service Vulnerability

Attackers can exploit this issue using readily available networking utilities.

BalaBit IT Security syslog-ng PCRE Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

BalaBit IT Security syslog-ng PCRE Denial of Service Vulnerability

References:

• [syslog-ng] rewrite problem (Micah Anderson)
  
• [syslog-ng] syslog-ng 3.2.4 has been released (devel at balabit.hu)
  
• syslog-ng Homepage (Balabit)