Known Vulnerabilities for Syslog-ng by Oneidentity
Listed below are 6 of the newest known vulnerabilities associated with "Syslog-ng" by "Oneidentity".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34478 json | Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-34477 json | The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname ve... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2022-38725 json | An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denia... | 7.5 - HIGH | 2023-01-23 | 2023-11-07 |
| CVE-2020-8019 json | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP... | 7.8 - HIGH | 2020-06-29 | 2020-07-09 |
| CVE-2011-1951 json | lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other v... | 4.3 - MEDIUM | 2011-07-11 | 2023-02-13 |
| CVE-2011-0343 json | Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations,... | 6.9 - MEDIUM | 2011-01-28 | 2020-05-19 |
| CVE-2008-5110 json | syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is on... | 9.3 - HIGH | 2008-11-17 | 2021-06-22 |
| CVE-2002-1200 json | Not Provided | 2002-10-28 | 2025-04-03 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oneidentity | Syslog-ng | 3.9.1 | |||
| Application | Oneidentity | Syslog-ng | 3.8.1 | |||
| Application | Oneidentity | Syslog-ng | 3.8.0 | |||
| Application | Oneidentity | Syslog-ng | 3.8.0 | |||
| Application | Oneidentity | Syslog-ng | 3.7.3 | |||
| Application | Oneidentity | Syslog-ng | 3.7.2 | |||
| Application | Oneidentity | Syslog-ng | 3.7.1 | |||
| Application | Oneidentity | Syslog-ng | 3.7.0 | |||
| Application | Oneidentity | Syslog-ng | 3.7.0 | |||
| Application | Oneidentity | Syslog-ng | 3.7.0 | |||
| Application | Oneidentity | Syslog-ng | 3.7.0 | |||
| Application | Oneidentity | Syslog-ng | 3.6.4-12.8.1 | |||
| Application | Oneidentity | Syslog-ng | 3.6.4 | |||
| Application | Oneidentity | Syslog-ng | 3.6.3 | |||
| Application | Oneidentity | Syslog-ng | 3.6.2 | |||
| Application | Oneidentity | Syslog-ng | 3.6.1 | |||
| Application | Oneidentity | Syslog-ng | 3.6.0 | |||
| Application | Oneidentity | Syslog-ng | 3.6.0 | |||
| Application | Oneidentity | Syslog-ng | 3.6.0 | |||
| Application | Oneidentity | Syslog-ng | 3.6.0 |