CVE-2022-38725

2023-01-2316:15:10

CWE-190

[email protected]

web.nvd.nist.gov

cve-2022-38725

integer overflow

rfc3164 parser

one identity

syslog-ng

denial of service

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.

Affected configurations

NVD

Node

oneidentitysyslog-ngRange<3.38.1-

oneidentitysyslog-ngRange<7.0.32premium

oneidentitysyslog-ng_store_boxRange<6.0.5-

oneidentitysyslog-ng_store_boxRange<7.0lts

CPENameOperatorVersion
oneidentity:syslog-ngoneidentity syslog-nglt3.38.1
oneidentity:syslog-ngoneidentity syslog-nglt7.0.32
oneidentity:syslog-ng_store_boxoneidentity syslog-ng store boxlt6.0.5
oneidentity:syslog-ng_store_boxoneidentity syslog-ng store boxlt7.0

CPE	Name	Operator	Version
oneidentity:syslog-ng	oneidentity syslog-ng	lt	3.38.1
oneidentity:syslog-ng	oneidentity syslog-ng	lt	7.0.32
oneidentity:syslog-ng_store_box	oneidentity syslog-ng store box	lt	6.0.5
oneidentity:syslog-ng_store_box	oneidentity syslog-ng store box	lt	7.0