ALPINE-CVE-2022-38725
- Source
- https://security.alpinelinux.org/vuln/CVE-2022-38725
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2022-38725.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2022-38725
- Upstream
- Published
- 2023-01-23T16:15:10Z
- Modified
- 2025-09-26T00:33:09.503563Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.
- References
Affected packages
Alpine:v3.17
syslog-ng
Package
- Name
- syslog-ng
- Purl
- pkg:apk/alpine/syslog-ng?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.38.1-r0
Affected versions
2.*
2.1.4-r0
2.1.4-r1
2.1.4-r2
2.1.4-r3
3.*
3.6.2-r0
3.6.2-r1
3.6.4-r0
3.7.1-r0
3.7.2-r0
3.7.2-r1
3.7.2-r2
3.7.2-r3
3.9.1-r0
3.9.1-r1
3.9.1-r2
3.9.1-r3
3.13.2-r0
3.13.2-r1
3.13.2-r2
3.13.2-r3
3.13.2-r4
3.18.1-r0
3.18.1-r1
3.18.1-r2
3.19.1-r0
3.19.1-r1
3.22.1-r0
3.22.1-r1
3.22.1-r2
3.25.1-r0
3.25.1-r1
3.26.1-r0
3.26.1-r1
3.27.1-r0
3.29.1-r0
3.30.1-r0
3.30.1-r1
3.30.1-r2
3.30.1-r3
3.30.1-r4
3.30.1-r5
3.36.1-r0
3.36.1-r1
Alpine:v3.18
syslog-ng
Package
- Name
- syslog-ng
- Purl
- pkg:apk/alpine/syslog-ng?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.38.1-r0
Affected versions
2.*
2.1.4-r0
2.1.4-r1
2.1.4-r2
2.1.4-r3
3.*
3.6.2-r0
3.6.2-r1
3.6.4-r0
3.7.1-r0
3.7.2-r0
3.7.2-r1
3.7.2-r2
3.7.2-r3
3.9.1-r0
3.9.1-r1
3.9.1-r2
3.9.1-r3
3.13.2-r0
3.13.2-r1
3.13.2-r2
3.13.2-r3
3.13.2-r4
3.18.1-r0
3.18.1-r1
3.18.1-r2
3.19.1-r0
3.19.1-r1
3.22.1-r0
3.22.1-r1
3.22.1-r2
3.25.1-r0
3.25.1-r1
3.26.1-r0
3.26.1-r1
3.27.1-r0
3.29.1-r0
3.30.1-r0
3.30.1-r1
3.30.1-r2
3.30.1-r3
3.30.1-r4
3.30.1-r5
3.36.1-r0
3.36.1-r1
Alpine:v3.19
syslog-ng
Package
- Name
- syslog-ng
- Purl
- pkg:apk/alpine/syslog-ng?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.38.1-r0
Affected versions
2.*
2.1.4-r0
2.1.4-r1
2.1.4-r2
2.1.4-r3
3.*
3.6.2-r0
3.6.2-r1
3.6.4-r0
3.7.1-r0
3.7.2-r0
3.7.2-r1
3.7.2-r2
3.7.2-r3
3.9.1-r0
3.9.1-r1
3.9.1-r2
3.9.1-r3
3.13.2-r0
3.13.2-r1
3.13.2-r2
3.13.2-r3
3.13.2-r4
3.18.1-r0
3.18.1-r1
3.18.1-r2
3.19.1-r0
3.19.1-r1
3.22.1-r0
3.22.1-r1
3.22.1-r2
3.25.1-r0
3.25.1-r1
3.26.1-r0
3.26.1-r1
3.27.1-r0
3.29.1-r0
3.30.1-r0
3.30.1-r1
3.30.1-r2
3.30.1-r3
3.30.1-r4
3.30.1-r5
3.36.1-r0
3.36.1-r1
Alpine:v3.20
syslog-ng
Package
- Name
- syslog-ng
- Purl
- pkg:apk/alpine/syslog-ng?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.38.1-r0
Affected versions
2.*
2.1.4-r0
2.1.4-r1
2.1.4-r2
2.1.4-r3
3.*
3.6.2-r0
3.6.2-r1
3.6.4-r0
3.7.1-r0
3.7.2-r0
3.7.2-r1
3.7.2-r2
3.7.2-r3
3.9.1-r0
3.9.1-r1
3.9.1-r2
3.9.1-r3
3.13.2-r0
3.13.2-r1
3.13.2-r2
3.13.2-r3
3.13.2-r4
3.18.1-r0
3.18.1-r1
3.18.1-r2
3.19.1-r0
3.19.1-r1
3.22.1-r0
3.22.1-r1
3.22.1-r2
3.25.1-r0
3.25.1-r1
3.26.1-r0
3.26.1-r1
3.27.1-r0
3.29.1-r0
3.30.1-r0
3.30.1-r1
3.30.1-r2
3.30.1-r3
3.30.1-r4
3.30.1-r5
3.36.1-r0
3.36.1-r1
Alpine:v3.21
syslog-ng
Package
- Name
- syslog-ng
- Purl
- pkg:apk/alpine/syslog-ng?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.38.1-r0
Affected versions
2.*
2.1.4-r0
2.1.4-r1
2.1.4-r2
2.1.4-r3
3.*
3.6.2-r0
3.6.2-r1
3.6.4-r0
3.7.1-r0
3.7.2-r0
3.7.2-r1
3.7.2-r2
3.7.2-r3
3.9.1-r0
3.9.1-r1
3.9.1-r2
3.9.1-r3
3.13.2-r0
3.13.2-r1
3.13.2-r2
3.13.2-r3
3.13.2-r4
3.18.1-r0
3.18.1-r1
3.18.1-r2
3.19.1-r0
3.19.1-r1
3.22.1-r0
3.22.1-r1
3.22.1-r2
3.25.1-r0
3.25.1-r1
3.26.1-r0
3.26.1-r1
3.27.1-r0
3.29.1-r0
3.30.1-r0
3.30.1-r1
3.30.1-r2
3.30.1-r3
3.30.1-r4
3.30.1-r5
3.36.1-r0
3.36.1-r1
Alpine:v3.22
syslog-ng
Package
- Name
- syslog-ng
- Purl
- pkg:apk/alpine/syslog-ng?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.38.1-r0
Affected versions
2.*
2.1.4-r0
2.1.4-r1
2.1.4-r2
2.1.4-r3
3.*
3.6.2-r0
3.6.2-r1
3.6.4-r0
3.7.1-r0
3.7.2-r0
3.7.2-r1
3.7.2-r2
3.7.2-r3
3.9.1-r0
3.9.1-r1
3.9.1-r2
3.9.1-r3
3.13.2-r0
3.13.2-r1
3.13.2-r2
3.13.2-r3
3.13.2-r4
3.18.1-r0
3.18.1-r1
3.18.1-r2
3.19.1-r0
3.19.1-r1
3.22.1-r0
3.22.1-r1
3.22.1-r2
3.25.1-r0
3.25.1-r1
3.26.1-r0
3.26.1-r1
3.27.1-r0
3.29.1-r0
3.30.1-r0
3.30.1-r1
3.30.1-r2
3.30.1-r3
3.30.1-r4
3.30.1-r5
3.36.1-r0
3.36.1-r1