CVE catalog

CVE-2007-6437

syslog-ng: CVE-2007-6437

Severity: Medium
Published: Dec 19, 2007, 9:46:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 3.35% · Oct 25, 2026

Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service (crash) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	syslog-ng	sid	`4.12.0-2`	fixed
Debian	syslog-ng	forky	`4.8.1-7`	fixed
Debian	syslog-ng	trixie	`4.8.1-5+deb13u1`	fixed
Debian	syslog-ng	bookworm	`3.38.1-5+deb12u1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	syslog-ng	source	sid	`2.0.6-1`	low	Not reported	[457334]
Debian	syslog-ng	source	forky	`2.0.6-1`	low	Not reported	[457334]
Debian	syslog-ng	source	trixie	`2.0.6-1`	low	Not reported	[457334]
Debian	syslog-ng	source	bookworm	`2.0.6-1`	low	Not reported	[457334]

[Debian bug #457334]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[syslog-ng]Fixed
Details (2)
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-core]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-dbg]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-dev]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-add-contextual-data]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-amqp]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-examples]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-extra]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-geoip2]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-graphite]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-http]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-mongodb]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-python]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-rdkafka]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-redis]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-riemann]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-slog]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-smtp]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-snmp]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-sql]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 2.0.6-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12

Next results

Observed: Oct 23, 2026, 5:03:59 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]