CVE-1999-0171
LowExploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
CVE-1999-0171 vulnerability involves a denial of service (DoS) attack on the syslog system by sending a large number of superfluous messages.
Risk Assessment
An attacker can block the logging system, leading to the loss of important event information and hindering system monitoring.
Recommendation
It is recommended to limit the number of messages that can be processed by syslog and implement message filtering mechanisms.
Other vulnerabilities in syslog
See all- CVE-2016-7660High
An issue was discovered in certain Apple products related to the 'syslog' component. iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3 are affected, allowing local users to gain privileges via unspecified vectors related to Mach port name references.
- CVE-2016-1722High
A vulnerability in syslog on Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
- CVE-1999-0566Medium
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs and hiding activities.
Original NVD description (English source)
Denial of service in syslog by sending it a large number of superfluous messages.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS