Oneidentity Syslog-Ng Store Box vulnerabilities

1 known vulnerability affecting oneidentity/syslog-ng_store_box.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-38725HIGHCVSS 7.5fixed in 6.0.5fixed in 7.02023-01-23
CVE-2022-38725 [HIGH] CWE-190 CVE-2022-38725: An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote a An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.
nvd