| Package | Affected versions | Patched versions |
|---|---|---|
| syslog-ng open source edition | ≤ 2.0.6 | |
| syslog-ng premium edition | ≤ 2.1.8 |
Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service (crash) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free