Vulnerability in Oneidentity Syslog-Ng
CVE-2024-47619
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.
Vulnerability class: Improper Certificate Validation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.004 (26.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 27th percentile — 26.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Oneidentity Syslog-Ng
- Syslog-Ng — versions < 4.8.2
- Debian Linux — versions 11.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/syslog-ng/syslog-ng/security/advisories/GHSA-xr54-gx74-fghg (Exploit, Vendor Advisory)
- github.com/syslog-ng/syslog-ng/commit/dadfdbecde5bfe710b0a6ee5699f96926b3f9006 (Patch)
- github.com/syslog-ng/syslog-ng/blob/b0ccc8952d333fbc2d97e51fddc0b569a15e7a7d/li… (Product)
- github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.2 (Release Notes)
- af854a3a-2127-422b-91ae-364da2661108 (Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2024-47619?
- CVE-2024-47619 is a high-severity vulnerability in Oneidentity Syslog-Ng, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2025-05-07.
- How severe is CVE-2024-47619?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2024-47619 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.