CVE-2008-5110

no score yetEPSS 2.2%

oneidentity syslog-ng: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2008-11-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oneidentity:syslog-ng

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505791
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083
http://secunia.com/advisories/35748
http://secunia.com/advisories/40551
http://security.gentoo.org/glsa/glsa-200907-10.xml

Check your stack JSON