CyberRota Analysis
AI-GeneratedThe vulnerability arises from a missing sanitization call in the `afsql_dd_run_query` function of syslog-ng versions prior to 4.12, allowing for SQL injection attacks when the SQL driver is manually configured. This can lead to unauthorized access to sensitive data or manipulation of the database. Organizations using syslog-ng, particularly those that have configured the SQL driver, should prioritize applying the fixes available in syslog-ng 4.12, syslog-ng Premium Edition 8.2, or syslog-ng Store Box 7.8 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and syslog-ng Store Box 7.8