Summary
It was discovered that librelp did not properly manage x509 certificates,
leading to a stack-based buffer overflow. A remote attacker could possibly
use this issue to execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | librelp | 1.2.9-1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | librelp | 1.2.14-3ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —CVE-2018-1000140 Public exploit
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificate…
References
-
report
https://ubuntu.com/security/CVE-2018-1000140