Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-38725

Опубликовано: 23 янв. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:-:*:*:*
Версия до 3.38.1 (исключая)
cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:premium:*:*:*
Версия до 7.0.32 (исключая)
cpe:2.3:a:oneidentity:syslog-ng_store_box:*:*:*:*:-:*:*:*
Версия до 6.0.5 (исключая)
cpe:2.3:a:oneidentity:syslog-ng_store_box:*:*:*:*:lts:*:*:*
Версия до 7.0 (исключая)

EPSS

Процентиль: 82%
0.02383
Низкий

7.5 High

CVSS3

Дефекты

CWE-190
CWE-190

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.

CVSS3: 7.5
msrc
больше 3 лет назад

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.

CVSS3: 7.5
debian
больше 3 лет назад

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3. ...

suse-cvrf
больше 3 лет назад

Security update for syslog-ng

suse-cvrf
больше 3 лет назад

Security update for syslog-ng

EPSS

Процентиль: 82%
0.02383
Низкий

7.5 High

CVSS3

Дефекты

CWE-190
CWE-190