CVE-2018-1000140

rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.

• CWE-787

• http://packetstormsecurity.com/files/172829/librelp-Remote-Code-Execution.html
• https://access.redhat.com/errata/RHSA-2018:1223Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1225Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1701Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1702Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1703Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1704Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1707Third Party Advisory
• https://github.com/rsyslog/librelp/blob/532aa362f0f7a8d037505b0a27a1df452f9bac9e/src/tcp.c#L1205Patch, Third Party Advisory
• https://lgtm.com/rules/1505913226124/Exploit, Third Party Advisory
• https://security.gentoo.org/glsa/201804-21Third Party Advisory
• https://usn.ubuntu.com/3612-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4151Third Party Advisory
• http://packetstormsecurity.com/files/172829/librelp-Remote-Code-Execution.html
• https://access.redhat.com/errata/RHSA-2018:1223Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1225Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1701Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1702Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1703Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1704Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1707Third Party Advisory
• https://github.com/rsyslog/librelp/blob/532aa362f0f7a8d037505b0a27a1df452f9bac9e/src/tcp.c#L1205Patch, Third Party Advisory
• https://lgtm.com/rules/1505913226124/Exploit, Third Party Advisory
• https://security.gentoo.org/glsa/201804-21Third Party Advisory
• https://usn.ubuntu.com/3612-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4151Third Party Advisory

Published

Mar 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000134UnboundID LDAP SDK version from commit 801111d8b5c732266a5db…
• CVE-2018-1000135GNOME NetworkManager version 1.10.2 and earlier contains a I…
• CVE-2018-1000136Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0…
• CVE-2018-1000137I, Librarian version 4.8 and earlier contains a Cross site R…8.8
• CVE-2018-1000138I, Librarian version 4.8 and earlier contains a SSRF vulnera…9.1
• CVE-2018-1000139I, Librarian version 4.8 and earlier contains a Cross Site S…6.1
• CVE-2018-1000141I, Librarian version 4.9 and earlier contains an Incorrect A…9.1
• CVE-2018-1000142An exposure of sensitive information vulnerability exists in…
• CVE-2018-1000143An exposure of sensitive information vulnerability exists in…
• CVE-2018-1000144A cross site scripting vulnerability exists in Jenkins Cucum…
• CVE-2018-1000145An exposure of sensitive information vulnerability exists in…
• CVE-2018-1000146An arbitrary code execution vulnerability exists in Liquibas…