{"vulnerability": "CVE-2024-47619", "sightings": [{"uuid": "3f9924c9-3bd7-47ee-907b-07ac06f6d7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://t.me/cvedetector/24716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47619 - Syslog-ng TLS Wildcard Certificate Matching Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47619 \nPublished : May 7, 2025, 4:15 p.m. | 25\u00a0minutes ago \nDescription : syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T19:00:37.000000Z"}, {"uuid": "478a9ccc-95f5-41b5-9c38-1742c763d8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lphg7icdpc2c", "content": "", "creation_timestamp": "2025-05-18T15:55:22.956886Z"}, {"uuid": "9a57dd23-1544-40bb-90b1-12e06e0e9e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "aa3424c2-7088-437b-a6f5-a7e146742e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1763", "content": "", "creation_timestamp": "2026-02-13T04:00:00.000000Z"}, {"uuid": "cf9c3745-f33b-45fa-93c8-62c97ca364e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467343284596625", "content": "", "creation_timestamp": "2025-05-07T15:50:46.492903Z"}, {"uuid": "1442b9d7-0851-4105-84c3-3d46284f4f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkdsgfb2p", "content": "", "creation_timestamp": "2025-05-07T18:26:58.226294Z"}, {"uuid": "fd0b0124-e75e-4ba0-a255-f69703703e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-47619", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47619\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.\n\ud83d\udccf Published: 2025-05-07T15:12:02.118Z\n\ud83d\udccf Modified: 2025-05-07T15:12:02.118Z\n\ud83d\udd17 References:\n1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-xr54-gx74-fghg\n2. https://github.com/syslog-ng/syslog-ng/commit/dadfdbecde5bfe710b0a6ee5699f96926b3f9006\n3. https://github.com/syslog-ng/syslog-ng/blob/b0ccc8952d333fbc2d97e51fddc0b569a15e7a7d/lib/transport/tls-verifier.c#L78-L110\n4. https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.2", "creation_timestamp": "2025-05-07T15:22:27.000000Z"}]}