CyberSecBulletin

Zlog Project vulnerabilities

We track 1 vulnerability in Zlog Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Zlog Project vulnerabilities

  • 9.8 Critical severity

    zlog: Heap-based Buffer Overflow

    CVE-2024-22857Zlog ProjectEPSS 1.69%

    Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but file_path may have data upto MAXLEN_CFG_LINE(MAXLEN_PATH*4) + 1. So a check was missing in zlog_rule_new() while copying the record_name fr