CVE-2020-35488
N/A
N/A
Summary
The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslog field. (For example, on Linux it is not possible to create a .. directory. On Windows, it is not possible to create a CON directory.)
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://github.com/GuillaumePetit84/CVE-2020-35488
- https://gitlab.com/nxlog-public/nxlog-ce/-/blob/master/ChangeLog.txt#L2
References
- https://github.com/GuillaumePetit84/CVE-2020-35488
- https://gitlab.com/nxlog-public/nxlog-ce/-/blob/master/ChangeLog.txt#L2
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.