[syslog-ng] Question about potential DoS condition

Balazs Scheidler bazsi at balabit.hu
Thu May 28 11:41:24 CEST 2009


On Tue, 2009-05-26 at 10:32 +0200, CentralRegion IPAdmin wrote:
> 
> Hello, 
> 
> May I ask a question, please? 
> In syslog-ng Vers. 3.0.2 there is a fix for a potential DoS condition
> related to character conversion eating up unlimited memory. 
> Does Version 2.1.4 or previous versions have the same vulnerability,
> or does it only affect version 3 ? 
> Many Thanks 

No, that version didn't have character encoding support.

-- 
Bazsi



More information about the syslog-ng mailing list