CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-47619

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 13.5%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2024-47619

Oneidentity » Syslog-Ng » Version: N/A

cpe:2.3:a:oneidentity:syslog-ng:-
Oneidentity » Syslog-Ng » Version: 1.4.0

cpe:2.3:a:oneidentity:syslog-ng:1.4.0
Oneidentity » Syslog-Ng » Version: 1.4.10

cpe:2.3:a:oneidentity:syslog-ng:1.4.10
Oneidentity » Syslog-Ng » Version: 1.4.15

cpe:2.3:a:oneidentity:syslog-ng:1.4.15
Oneidentity » Syslog-Ng » Version: 1.4.7

cpe:2.3:a:oneidentity:syslog-ng:1.4.7
Oneidentity » Syslog-Ng » Version: 1.4.8

cpe:2.3:a:oneidentity:syslog-ng:1.4.8
Oneidentity » Syslog-Ng » Version: 1.4.9

cpe:2.3:a:oneidentity:syslog-ng:1.4.9
Oneidentity » Syslog-Ng » Version: 1.5.15

cpe:2.3:a:oneidentity:syslog-ng:1.5.15
Oneidentity » Syslog-Ng » Version: 1.5.20

cpe:2.3:a:oneidentity:syslog-ng:1.5.20
Oneidentity » Syslog-Ng » Version: 2.0

cpe:2.3:a:oneidentity:syslog-ng:2.0
Oneidentity » Syslog-Ng » Version: 2.0.9

cpe:2.3:a:oneidentity:syslog-ng:2.0.9
Oneidentity » Syslog-Ng » Version: 2.0.9-27.34.40.5.1

cpe:2.3:a:oneidentity:syslog-ng:2.0.9-27.34.40.5.1
Oneidentity » Syslog-Ng » Version: 3.0

cpe:2.3:a:oneidentity:syslog-ng:3.0
Oneidentity » Syslog-Ng » Version: 3.0.1

cpe:2.3:a:oneidentity:syslog-ng:3.0.1
Oneidentity » Syslog-Ng » Version: 3.0.2

cpe:2.3:a:oneidentity:syslog-ng:3.0.2
Oneidentity » Syslog-Ng » Version: 3.0.3

cpe:2.3:a:oneidentity:syslog-ng:3.0.3
Oneidentity » Syslog-Ng » Version: 3.0.4

cpe:2.3:a:oneidentity:syslog-ng:3.0.4
Oneidentity » Syslog-Ng » Version: 3.0.5

cpe:2.3:a:oneidentity:syslog-ng:3.0.5
Oneidentity » Syslog-Ng » Version: 3.0.8

cpe:2.3:a:oneidentity:syslog-ng:3.0.8
Oneidentity » Syslog-Ng » Version: 3.1

cpe:2.3:a:oneidentity:syslog-ng:3.1
Oneidentity » Syslog-Ng » Version: 3.1.0

cpe:2.3:a:oneidentity:syslog-ng:3.1.0
Oneidentity » Syslog-Ng » Version: 3.10.1

cpe:2.3:a:oneidentity:syslog-ng:3.10.1
Oneidentity » Syslog-Ng » Version: 3.11.1

cpe:2.3:a:oneidentity:syslog-ng:3.11.1
Oneidentity » Syslog-Ng » Version: 3.12.1

cpe:2.3:a:oneidentity:syslog-ng:3.12.1
Oneidentity » Syslog-Ng » Version: 3.13.1

cpe:2.3:a:oneidentity:syslog-ng:3.13.1
Oneidentity » Syslog-Ng » Version: 3.13.2

cpe:2.3:a:oneidentity:syslog-ng:3.13.2
Oneidentity » Syslog-Ng » Version: 3.14.1

cpe:2.3:a:oneidentity:syslog-ng:3.14.1
Oneidentity » Syslog-Ng » Version: 3.15.1

cpe:2.3:a:oneidentity:syslog-ng:3.15.1
Oneidentity » Syslog-Ng » Version: 3.16.1

cpe:2.3:a:oneidentity:syslog-ng:3.16.1
Oneidentity » Syslog-Ng » Version: 3.17.1

cpe:2.3:a:oneidentity:syslog-ng:3.17.1
Oneidentity » Syslog-Ng » Version: 3.17.2

cpe:2.3:a:oneidentity:syslog-ng:3.17.2
Oneidentity » Syslog-Ng » Version: 3.18.1

cpe:2.3:a:oneidentity:syslog-ng:3.18.1
Oneidentity » Syslog-Ng » Version: 3.19.1

cpe:2.3:a:oneidentity:syslog-ng:3.19.1
Oneidentity » Syslog-Ng » Version: 3.19.1-bp151.4.6.1

cpe:2.3:a:oneidentity:syslog-ng:3.19.1-bp151.4.6.1
Oneidentity » Syslog-Ng » Version: 3.19.1-lp151.3.6.1

cpe:2.3:a:oneidentity:syslog-ng:3.19.1-lp151.3.6.1
Oneidentity » Syslog-Ng » Version: 3.2

cpe:2.3:a:oneidentity:syslog-ng:3.2
Oneidentity » Syslog-Ng » Version: 3.2.1

cpe:2.3:a:oneidentity:syslog-ng:3.2.1
Oneidentity » Syslog-Ng » Version: 3.2.2

cpe:2.3:a:oneidentity:syslog-ng:3.2.2
Oneidentity » Syslog-Ng » Version: 3.2.4

cpe:2.3:a:oneidentity:syslog-ng:3.2.4
Oneidentity » Syslog-Ng » Version: 3.20.1

cpe:2.3:a:oneidentity:syslog-ng:3.20.1
Oneidentity » Syslog-Ng » Version: 3.21.1

cpe:2.3:a:oneidentity:syslog-ng:3.21.1
Oneidentity » Syslog-Ng » Version: 3.22.1

cpe:2.3:a:oneidentity:syslog-ng:3.22.1
Oneidentity » Syslog-Ng » Version: 3.23.1

cpe:2.3:a:oneidentity:syslog-ng:3.23.1
Oneidentity » Syslog-Ng » Version: 3.24.1

cpe:2.3:a:oneidentity:syslog-ng:3.24.1
Oneidentity » Syslog-Ng » Version: 3.25.1

cpe:2.3:a:oneidentity:syslog-ng:3.25.1
Oneidentity » Syslog-Ng » Version: 3.26.1

cpe:2.3:a:oneidentity:syslog-ng:3.26.1
Oneidentity » Syslog-Ng » Version: 3.27.1

cpe:2.3:a:oneidentity:syslog-ng:3.27.1
Oneidentity » Syslog-Ng » Version: 3.28.1

cpe:2.3:a:oneidentity:syslog-ng:3.28.1
Oneidentity » Syslog-Ng » Version: 3.29.1

cpe:2.3:a:oneidentity:syslog-ng:3.29.1
Oneidentity » Syslog-Ng » Version: 3.3.0

cpe:2.3:a:oneidentity:syslog-ng:3.3.0
Oneidentity » Syslog-Ng » Version: 3.3.1

cpe:2.3:a:oneidentity:syslog-ng:3.3.1
Oneidentity » Syslog-Ng » Version: 3.3.10

cpe:2.3:a:oneidentity:syslog-ng:3.3.10
Oneidentity » Syslog-Ng » Version: 3.3.11

cpe:2.3:a:oneidentity:syslog-ng:3.3.11
Oneidentity » Syslog-Ng » Version: 3.3.2

cpe:2.3:a:oneidentity:syslog-ng:3.3.2
Oneidentity » Syslog-Ng » Version: 3.3.3

cpe:2.3:a:oneidentity:syslog-ng:3.3.3
Oneidentity » Syslog-Ng » Version: 3.3.4

cpe:2.3:a:oneidentity:syslog-ng:3.3.4
Oneidentity » Syslog-Ng » Version: 3.3.5

cpe:2.3:a:oneidentity:syslog-ng:3.3.5
Oneidentity » Syslog-Ng » Version: 3.3.5.90

cpe:2.3:a:oneidentity:syslog-ng:3.3.5.90
Oneidentity » Syslog-Ng » Version: 3.3.6

cpe:2.3:a:oneidentity:syslog-ng:3.3.6
Oneidentity » Syslog-Ng » Version: 3.3.6.90

cpe:2.3:a:oneidentity:syslog-ng:3.3.6.90
Oneidentity » Syslog-Ng » Version: 3.3.6.91

cpe:2.3:a:oneidentity:syslog-ng:3.3.6.91
Oneidentity » Syslog-Ng » Version: 3.3.7

cpe:2.3:a:oneidentity:syslog-ng:3.3.7
Oneidentity » Syslog-Ng » Version: 3.3.8

cpe:2.3:a:oneidentity:syslog-ng:3.3.8
Oneidentity » Syslog-Ng » Version: 3.3.9

cpe:2.3:a:oneidentity:syslog-ng:3.3.9
Oneidentity » Syslog-Ng » Version: 3.30.1

cpe:2.3:a:oneidentity:syslog-ng:3.30.1
Oneidentity » Syslog-Ng » Version: 3.31.1

cpe:2.3:a:oneidentity:syslog-ng:3.31.1
Oneidentity » Syslog-Ng » Version: 3.31.2

cpe:2.3:a:oneidentity:syslog-ng:3.31.2
Oneidentity » Syslog-Ng » Version: 3.32.1

cpe:2.3:a:oneidentity:syslog-ng:3.32.1
Oneidentity » Syslog-Ng » Version: 3.38.1

cpe:2.3:a:oneidentity:syslog-ng:3.38.1
Oneidentity » Syslog-Ng » Version: 3.4.0

cpe:2.3:a:oneidentity:syslog-ng:3.4.0
Oneidentity » Syslog-Ng » Version: 3.4.1

cpe:2.3:a:oneidentity:syslog-ng:3.4.1
Oneidentity » Syslog-Ng » Version: 3.4.2

cpe:2.3:a:oneidentity:syslog-ng:3.4.2
Oneidentity » Syslog-Ng » Version: 3.4.3

cpe:2.3:a:oneidentity:syslog-ng:3.4.3
Oneidentity » Syslog-Ng » Version: 3.4.4

cpe:2.3:a:oneidentity:syslog-ng:3.4.4
Oneidentity » Syslog-Ng » Version: 3.4.5

cpe:2.3:a:oneidentity:syslog-ng:3.4.5
Oneidentity » Syslog-Ng » Version: 3.4.6

cpe:2.3:a:oneidentity:syslog-ng:3.4.6
Oneidentity » Syslog-Ng » Version: 3.4.7

cpe:2.3:a:oneidentity:syslog-ng:3.4.7
Oneidentity » Syslog-Ng » Version: 3.4.8

cpe:2.3:a:oneidentity:syslog-ng:3.4.8
Oneidentity » Syslog-Ng » Version: 3.5.0

cpe:2.3:a:oneidentity:syslog-ng:3.5.0
Oneidentity » Syslog-Ng » Version: 3.5.1

cpe:2.3:a:oneidentity:syslog-ng:3.5.1
Oneidentity » Syslog-Ng » Version: 3.5.2

cpe:2.3:a:oneidentity:syslog-ng:3.5.2
Oneidentity » Syslog-Ng » Version: 3.5.3

cpe:2.3:a:oneidentity:syslog-ng:3.5.3
Oneidentity » Syslog-Ng » Version: 3.5.4

cpe:2.3:a:oneidentity:syslog-ng:3.5.4
Oneidentity » Syslog-Ng » Version: 3.5.4.1

cpe:2.3:a:oneidentity:syslog-ng:3.5.4.1
Oneidentity » Syslog-Ng » Version: 3.5.5

cpe:2.3:a:oneidentity:syslog-ng:3.5.5
Oneidentity » Syslog-Ng » Version: 3.5.6

cpe:2.3:a:oneidentity:syslog-ng:3.5.6
Oneidentity » Syslog-Ng » Version: 3.6.0

cpe:2.3:a:oneidentity:syslog-ng:3.6.0
Oneidentity » Syslog-Ng » Version: 3.6.1

cpe:2.3:a:oneidentity:syslog-ng:3.6.1
Oneidentity » Syslog-Ng » Version: 3.6.2

cpe:2.3:a:oneidentity:syslog-ng:3.6.2
Oneidentity » Syslog-Ng » Version: 3.6.3

cpe:2.3:a:oneidentity:syslog-ng:3.6.3
Oneidentity » Syslog-Ng » Version: 3.6.4

cpe:2.3:a:oneidentity:syslog-ng:3.6.4
Oneidentity » Syslog-Ng » Version: 3.6.4-12.8.1

cpe:2.3:a:oneidentity:syslog-ng:3.6.4-12.8.1
Oneidentity » Syslog-Ng » Version: 3.7.0

cpe:2.3:a:oneidentity:syslog-ng:3.7.0
Oneidentity » Syslog-Ng » Version: 3.7.1

cpe:2.3:a:oneidentity:syslog-ng:3.7.1
Oneidentity » Syslog-Ng » Version: 3.7.2

cpe:2.3:a:oneidentity:syslog-ng:3.7.2
Oneidentity » Syslog-Ng » Version: 3.7.3

cpe:2.3:a:oneidentity:syslog-ng:3.7.3
Oneidentity » Syslog-Ng » Version: 3.8.0

cpe:2.3:a:oneidentity:syslog-ng:3.8.0
Oneidentity » Syslog-Ng » Version: 3.8.1

cpe:2.3:a:oneidentity:syslog-ng:3.8.1
Oneidentity » Syslog-Ng » Version: 3.9.1

cpe:2.3:a:oneidentity:syslog-ng:3.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-47619

Products

Pricing

Contact Us