Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.
| Software | From | Fixed in |
|---|---|---|
| balabit / syslog-ng | - | 1.4.6.x |
| balabit / syslog-ng | 1.4.7 | 1.4.7.x |
| balabit / syslog-ng | 1.4.8 | 1.4.8.x |