ISOMAN

CVE

CVE-2018-1000140

rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/172829/librelp-Remote-Code-Execution.html
  2. https://access.redhat.com/errata/RHSA-2018:1223
  3. https://access.redhat.com/errata/RHSA-2018:1225
  4. https://access.redhat.com/errata/RHSA-2018:1701
  5. https://access.redhat.com/errata/RHSA-2018:1702
  6. https://access.redhat.com/errata/RHSA-2018:1703
  7. https://access.redhat.com/errata/RHSA-2018:1704
  8. https://access.redhat.com/errata/RHSA-2018:1707
  9. https://github.com/rsyslog/librelp/blob/532aa362f0f7a8d037505b0a27a1df452f9bac9e/src/tcp.c#L1205
  10. https://lgtm.com/rules/1505913226124/
  11. https://security.gentoo.org/glsa/201804-21
  12. https://usn.ubuntu.com/3612-1/
  13. https://www.debian.org/security/2018/dsa-4151
  14. http://packetstormsecurity.com/files/172829/librelp-Remote-Code-Execution.html
  15. https://access.redhat.com/errata/RHSA-2018:1223
  16. https://access.redhat.com/errata/RHSA-2018:1225
  17. https://access.redhat.com/errata/RHSA-2018:1701
  18. https://access.redhat.com/errata/RHSA-2018:1702
  19. https://access.redhat.com/errata/RHSA-2018:1703
  20. https://access.redhat.com/errata/RHSA-2018:1704