| Package | Affected versions | Patched versions |
|---|---|---|
| syslog-ng | = 1.4.0= 1.4.10= 1.4.15= 1.4.7= 1.4.8= 1.4.9= 1.5.15= 1.5.20 |
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free