VDB

GCVE-110-MAGEIA-2018-251

GCVE-110-MAGEIA-2018-251
Advisory Published
Vulnetix · Advisory published May 19, 2018
librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate (CVE-2018-1000140).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialibrelp0 (affected), 1.2.7-3.1.mga5 (unaffected)—
Mageialibrelp0 (affected), 1.2.13-1.1.mga6 (unaffected)—

Aliases

CVE-2018-1000140

Transitive aliases

RHSA-2018:1702RHSA-2018:1223SUSE-SU-2022:1891-1RHSA-2018:1225RHSA-2018:1703CNVD-2018-06442BDU:2018-00654OPENSUSE-SU-2024:10982-1RHSA-2018:1704GHSA-m73v-c2p6-943pSUSE-SU-2018:0828-1RHSA-2018:1701RHSA-2018:1707SUSE-SU-2018:0822-1GSD-2018-1000140

References

Updated librelp packages fix security vulnerability
advisory
Updated librelp packages fix security vulnerability
issue
Updated librelp packages fix security vulnerability
issue
Updated librelp packages fix security vulnerability
issue

Browse GCVE Records

72,096 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›