PT-2025-20232 · Syslog-Ng+2 · Syslog-Ng+2

Published 2025-05-07 · Updated 2025-09-19 · CVE-2024-47619

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions syslog-ng versions prior to 4.8.2 syslog-ng version 3.28.1-2+deb11u2 and earlier for Debian 11 bullseye

Description syslog-ng is an enhanced log daemon. Prior to version 4.8.2, tls wildcard match() matches on certificates such as foo.*.bar although that is not allowed. It is also possible to pass partial wildcards such as foo.a*c.bar which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations.

Recommendations For versions prior to 4.8.2, upgrade to version 4.8.2 or later. For Debian 11 bullseye, upgrade to version 3.28.1-2+deb11u2 or later. As a temporary workaround, consider disabling the tls wildcard match() function until a patch is available. Restrict access to TLS connections to minimize the risk of exploitation.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

AZL-61729

AZL-61731

BDU:2025-11984

CVE-2024-47619

DLA-4182-1

GHSA-XR54-GX74-FGHG

OPENSUSE-SU-2025:15070-1

Affected Products

Astra Linux

Debian

Syslog-Ng

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47619.json · Exploit
• 🔥 https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-xr54-gx74-fghg · Exploit
• https://github.com/syslog-ng/syslog-ng/commit/dadfdbecde5bfe710b0a6ee5699f96926b3f9006 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-47619 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4182-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-47619 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47619 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-47619 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-61731 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-61729 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-47619 · Vendor Advisory