CVE-2011-1951

lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.

• CWE-399

• http://git.balabit.hu/?p=bazsi/syslog-ng-3.2.git%3Ba=commit%3Bh=09710c0b105e579d35c7b5f6c66d1ea5e3a3d3ff
• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062107.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/45122Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/05/26/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/47800Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=709088Issue Tracking, Patch, Third Party Advisory
• http://git.balabit.hu/?p=bazsi/syslog-ng-3.2.git%3Ba=commit%3Bh=09710c0b105e579d35c7b5f6c66d1ea5e3a3d3ff
• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062107.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/45122Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/05/26/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/47800Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=709088Issue Tracking, Patch, Third Party Advisory

Published

Jul 11, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1945The elliptic curve cryptography (ECC) subsystem in OpenSSL 1…
• CVE-2011-1946gnomesu-pam-backend in libgnomesu 1.0.0 prints an error mess…
• CVE-2011-1947fetchmail 5.9.9 through 6.3.19 does not properly limit the w…
• CVE-2011-1948Cross-site scripting (XSS) vulnerability in Plone 4.1 and ea…
• CVE-2011-1949Cross-site scripting (XSS) vulnerability in the safe_html fi…
• CVE-2011-1950plone.app.users in Plone 4.0 and 4.1 allows remote authentic…
• CVE-2011-1952common.php in Post Revolution before 0.8.0c-2 allows remote …
• CVE-2011-1953Multiple cross-site scripting (XSS) vulnerabilities in commo…
• CVE-2011-1954Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2011-1955Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-1956The bytes_repr_len function in Wireshark 1.4.5 uses an incor…
• CVE-2011-1957The dissect_dcm_main function in epan/dissectors/packet-dcm.…