CVE catalog

CVE-2011-1951

syslog-ng: CVE-2011-1951

Severity: Medium
Published: Jul 11, 2011, 8:55:01 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.46% · Oct 25, 2026

lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	syslog-ng	sid	`4.12.0-2`	fixed
Debian	syslog-ng	forky	`4.8.1-7`	fixed
Debian	syslog-ng	trixie	`4.8.1-5+deb13u1`	fixed
Debian	syslog-ng	bookworm	`3.38.1-5+deb12u1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	syslog-ng	source	sid	`3.2.4-1`	low	Not reported	Not reported
Debian	syslog-ng	source	forky	`3.2.4-1`	low	Not reported	Not reported
Debian	syslog-ng	source	trixie	`3.2.4-1`	low	Not reported	Not reported
Debian	syslog-ng	source	bookworm	`3.2.4-1`	low	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[syslog-ng]Fixed
Details (2)
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-core]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-dbg]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-dev]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-add-contextual-data]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-amqp]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-examples]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-extra]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · all · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-geoip2]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-graphite]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-http]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-mongodb]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-python]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-rdkafka]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-redis]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-riemann]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-slog]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-smtp]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-snmp]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
[syslog-ng-mod-sql]Fixed
Source package: [syslog-ng]
Details (2)
- 3.38.1-5+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12
- 3.38.1-5+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.2.4-1
  dsa · syslog-ng · debian · bookworm; dsa · syslog-ng · debian · 12

Next results

Observed: Oct 23, 2026, 5:05:25 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]