Is Syslog-ng Premium Edition affected by the Python buffer overflow CVE-2021-3177? (4369362)

Chat now with support

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

Is Syslog-ng Premium Edition affected by the Python buffer overflow CVE-2021-3177?
Description

Is Syslog-ng Premium Edition affected by the Python buffer overflow CVE-2021-3177?

Details of the CVE can be found here:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3177
Resolution

Syslog-ng Premium Edition does use the affected library (ctypes), however it does not use any of the vulnerable functions.
Therefore Syslog-ng Premium Edition is not affected by the Python buffer overflow mentioned in CVE-2021-3177.

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title