| Package | Affected versions | Patched versions |
|---|---|---|
| sup | = 1.8 |
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free