Unrated severityNVD Advisory· Published Nov 17, 2008· Updated Jun 16, 2026

CVE-2008-5110

Description

syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oneidentity/Syslog Ng
cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:*:*:*:*
Range: <=2.0.9
Syslog Ng/Syslog Ngllm-fuzzy
Range: <=2.0.9
osv-coords
pkg:rpm/opensuse/syslog-ng&distro=openSUSE%20Tumbleweed
Range: < 3.33.2-1.2

Patches

Vulnerability mechanics

References

bugs.debian.org/cgi-bin/bugreport.cginvdIssue TrackingThird Party Advisory
secunia.com/advisories/35748nvdThird Party Advisory
secunia.com/advisories/40551nvdThird Party Advisory
security.gentoo.org/glsa/glsa-200907-10.xmlnvdThird Party Advisory
www.openwall.com/lists/oss-security/2008/11/17/3nvdMailing ListThird Party Advisory
www.vupen.com/english/advisories/2010/1796nvdPermissions RequiredThird Party Advisory
itrc.hp.com/service/cki/docDisplay.donvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000