CVE-2024-47619 Details
Description
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.
A vulnerability exists in syslog-ng versions prior to 4.8.2, where the function 'tls_wildcard_match()' incorrectly accepts wildcards in certificate names. It allows wildcards to match more broadly than intended, such as 'foo.*.bar', and accepts partial wildcards like 'foo.a*c.bar', which could lead to man-in-the-middle attacks by falsely validating certificates. This issue impacts TLS connections by allowing the creation of fake certificates that could be accepted as valid, potentially leading to interception or alteration of communications.
Users can upgrade to syslog-ng version 4.8.2 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 7, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-295 | Improper Certificate Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| oneidentity syslog-ng | < 4.8.2 |
CPE
Remediation
| |
| debian debian linux | 11.0 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Sep 22, 2025 | Reanalysis | [email protected] |
| Sep 19, 2025 | Initial Analysis | [email protected] |
| May 28, 2025 | CVE Modified | CVE |
| May 7, 2025 | CVE Modified | CISA-ADP |
| May 7, 2025 | New CVE Received | [email protected] |