syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4182 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4182-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Abhijith PA     May 28, 2025                                  https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : syslog-ng     Version        : 3.28.1-2+deb11u2     CVE ID         : CVE-2024-47619

    A security issue was found in syslog-ng, an enhanced log daemon. In     prior version, `tls_wildcard_match()` matches on certificates such as     `foo.*.bar` although that is not allowed. It is also possible to pass     partial wildcards such as `foo.a*c.bar` which glib matches but should     be avoided / invalidated. This issue could have an impact on TLS     connections, such as in man-in-the-middle situations.

    For Debian 11 bullseye, this problem has been fixed in version     3.28.1-2+deb11u2.

    We recommend that you upgrade your syslog-ng packages.

    For the detailed security status of syslog-ng please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/syslog-ng

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the syslog package has been released.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0fc3d8b7bf advisory.

    update to 4.8.2 to fix CVE-2024-47619

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of syslog-ng installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47619 advisory.

  - syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates     such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as     `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on     TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.
    (CVE-2024-47619)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of syslog-ng installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47619 advisory.

  - syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates     such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as     `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on     TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.
    (CVE-2024-47619)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
237408	Debian dla-4182 : syslog-ng - security update	Nessus	Debian Local Security Checks	high
236884	Photon OS 4.0: Syslog PHSA-2025-4.0-0800	Nessus	PhotonOS Local Security Checks	high
236883	Fedora 41 : syslog-ng (2025-0fc3d8b7bf)	Nessus	Fedora Local Security Checks	high
236826	CBL Mariner 2.0 Security Update: syslog-ng (CVE-2024-47619)	Nessus	MarinerOS Local Security Checks	high
236820	Azure Linux 3.0 Security Update: syslog-ng (CVE-2024-47619)	Nessus	Azure Linux Local Security Checks	high
235938	Photon OS 5.0: Syslog PHSA-2025-5.0-0521	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2024-47619

high

Tenable Plugins

high

high

high

high

high

high