CVE-2011-1951

MEDIUM 4.3CVE-2011-1951 · Published 11/07/2011 · updated 16/06/2026

In short

CVE-2011-1951 is a MEDIUM (CVSS 4.3) vulnerability affecting syslog-ng (oneidentity).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.5% of all vulnerabilities.
Fix: update to 3.2.4 or later.

Package	Affected versions	Patched versions
syslog-ng oneidentity	`< 3.2.4`	`3.2.4`

Description

lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.

References

git.balabit.hu
lists.fedoraproject.org/pipermail/package-announce/2011-June/062107.html · Mailing List
secunia.com/advisories/45122 · Third Party Advisory
openwall.com/lists/oss-security/2011/05/26/1 · Mailing List
securityfocus.com/bid/47800 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking

More vulnerabilities in syslog-ng

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

syslog-ng

oneidentity

< 3.2.4

3.2.4

More vulnerabilities in syslog-ng

See all →