Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2018-1000140

critical

CVE-2018-1000140

librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c

Published Modified CWE 787
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat, Amazon, Oracle, Photon OS. Rated lower by Ubuntu (medium).

Description

rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.

Affected packages and fixed versions

SourcePackageFixed in
amazon linux 2librelp, librelp-debuginfo, librelp-devel1.2.12-1.amzn2.0.1
Oracle Linux 6librelp, librelp-devel1.2.7-3.el6_9.1
Oracle Linux 7librelp, librelp-devel1.2.12-1.el7_5.1
Photon OS 1.0librelp1.2.9-3.ph1
Photon OS 2.0librelp1.2.13-2.ph2
debian 11librelp1.2.15-1
debian 12librelp1.2.15-1
debian 13librelp1.2.15-1
debian 14librelp1.2.15-1
debian 8librelp1.2.7-2+deb8u1
debian 9librelp1.2.12-1+deb9u1
echolibrelp1.2.15-1
Show all 20 entries from 16 sources
SourcePackageFixed in
amazon linux 2librelp1.2.12-1.amzn2.0.1
amazon linux 2librelp-debuginfo1.2.12-1.amzn2.0.1
amazon linux 2librelp-devel1.2.12-1.amzn2.0.1
Oracle Linux 6librelp1.2.7-3.el6_9.1
Oracle Linux 6librelp-devel1.2.7-3.el6_9.1
Oracle Linux 7librelp1.2.12-1.el7_5.1
Oracle Linux 7librelp-devel1.2.12-1.el7_5.1
Photon OS 1.0librelp1.2.9-3.ph1
Photon OS 2.0librelp1.2.13-2.ph2
debian 11librelp1.2.15-1
debian 12librelp1.2.15-1
debian 13librelp1.2.15-1
debian 14librelp1.2.15-1
debian 8librelp1.2.7-2+deb8u1
debian 9librelp1.2.12-1+deb9u1
echolibrelp1.2.15-1
ubuntu 14.04librelp1.2.2-2ubuntu1.1
ubuntu 14.04-ESMlibrelp1.2.2-2ubuntu1.1
ubuntu 16.04-ESMlibrelp1.2.9-1ubuntu0.1~esm1
ubuntu 18.04-ESMlibrelp1.2.14-3ubuntu0.1~esm1

References

All 21 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.