CVE-2011-1951: Oneidentity Syslog-NG

Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days.

lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.

Affected products

• Oneidentity Syslog-NG: before 3.2.4 (fixed in 3.2.4)

Published 2011-07-11. Last modified 2026-06-16.