Vulnerability in Logsurfer

CVE-2002-1889

Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry.

EPSS: 0.021 (79.3th percentile) — read the EPSS interpretation.

Affected products

  • Logsurfer — versions 1.5, 1.5a, 1.41
  • N/a — versions n/a

References