CVE-2018-1000140
Fixed in a distro release EPSS 9%
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.
Products: rsyslog librelp, debian_linux, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | librelp | 1.2.12-1.amzn2.0.1 |
| Amazon Linux 2 | librelp-devel | 1.2.12-1.amzn2.0.1 |
| Debian 12 | librelp | 1.2.15-1 |
| Debian 13 | librelp | 1.2.15-1 |
| Debian 14 | librelp | 1.2.15-1 |
| Debian 8 | librelp | 1.2.7-2+deb8u1 |
| Debian 9 | librelp | 1.2.12-1+deb9u1 |
| Red Hat Enterprise Linux 6 | librelp | 0:1.2.7-3.el6_9.1 |
| Red Hat Enterprise Linux 6 | librelp-debuginfo | 0:1.2.7-3.el6_9.1 |
| Red Hat Enterprise Linux 6 | librelp-devel | 0:1.2.7-3.el6_9.1 |
| Red Hat Enterprise Linux 7 | librelp | 0:1.2.12-1.el7_5.1 |
| Red Hat Enterprise Linux 7 | librelp-debuginfo | 0:1.2.12-1.el7_5.1 |
| Red Hat Enterprise Linux 7 | librelp-devel | 0:1.2.12-1.el7_5.1 |
| Red Hat rhel aus 6.6 | librelp | 0:1.2.7-3.el6_6.1 |
| Red Hat rhel aus 6.6 | librelp-debuginfo | 0:1.2.7-3.el6_6.1 |
| Red Hat rhel aus 6.6 | librelp-devel | 0:1.2.7-3.el6_6.1 |
| Red Hat rhel aus 7.2 | librelp | 0:1.2.0-4.el7_2 |
| Red Hat rhel aus 7.2 | librelp-debuginfo | 0:1.2.0-4.el7_2 |
| Red Hat rhel aus 7.2 | librelp-devel | 0:1.2.0-4.el7_2 |
| Red Hat rhel e4s 7.2 | librelp | 0:1.2.0-4.el7_2 |
| Red Hat rhel e4s 7.2 | librelp-debuginfo | 0:1.2.0-4.el7_2 |
| Red Hat rhel e4s 7.2 | librelp-devel | 0:1.2.0-4.el7_2 |
| Red Hat rhel eus 6.7 | librelp | 0:1.2.7-3.el6_7.1 |
| Red Hat rhel eus 6.7 | librelp-debuginfo | 0:1.2.7-3.el6_7.1 |
| Red Hat rhel eus 6.7 | librelp-devel | 0:1.2.7-3.el6_7.1 |
| Red Hat rhel eus 7.3 | librelp | 0:1.2.0-4.el7_3 |
| Red Hat rhel eus 7.3 | librelp-debuginfo | 0:1.2.0-4.el7_3 |
| Red Hat rhel eus 7.3 | librelp-devel | 0:1.2.0-4.el7_3 |
| Red Hat rhel eus 7.4 | librelp | 0:1.2.12-1.el7_4.1 |
| Red Hat rhel eus 7.4 | librelp-debuginfo | 0:1.2.12-1.el7_4.1 |
| Red Hat rhel eus 7.4 | librelp-devel | 0:1.2.12-1.el7_4.1 |
| Red Hat rhel tus 6.6 | librelp | 0:1.2.7-3.el6_6.1 |
| Red Hat rhel tus 6.6 | librelp-debuginfo | 0:1.2.7-3.el6_6.1 |
| Red Hat rhel tus 6.6 | librelp-devel | 0:1.2.7-3.el6_6.1 |
| Red Hat rhel tus 7.2 | librelp | 0:1.2.0-4.el7_2 |
| Red Hat rhel tus 7.2 | librelp-debuginfo | 0:1.2.0-4.el7_2 |
| Red Hat rhel tus 7.2 | librelp-devel | 0:1.2.0-4.el7_2 |
| SUSE HPE Helion OpenStack 8 | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | librelp | 1.2.7-3.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | librelp | 1.2.7-3.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | librelp | 1.2.12-3.3.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Server 12 SP5 | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Server 12-LTSS | librelp | 1.2.7-3.3.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | librelp | 1.2.7-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | librelp | 1.2.7-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | librelp | 1.2.7-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | librelp | 1.2.12-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | librelp | 1.2.15-3.6.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | librelp | 1.2.7-3.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | librelp | 1.2.12-3.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | librelp | 1.2.15-3.6.3 |
| SUSE OpenStack Cloud 6 | librelp | 1.2.7-3.3.1 |
| SUSE OpenStack Cloud 8 | librelp | 1.2.15-3.6.3 |
| SUSE OpenStack Cloud 9 | librelp | 1.2.15-3.6.3 |
| SUSE OpenStack Cloud Crowbar 8 | librelp | 1.2.15-3.6.3 |
| SUSE OpenStack Cloud Crowbar 9 | librelp | 1.2.15-3.6.3 |
| Ubuntu 14.04 LTS | librelp | 1.2.2-2ubuntu1.1 |
| Ubuntu Pro 16.04 LTS | librelp | 1.2.9-1ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | librelp | 1.2.14-3ubuntu0.1~esm1 |