Red Hat Security Advisory

RHSA-2018:1703

librelp security update

Released 2018-05-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.2) librelp-1.2.0-4.el7_2
Red Hat Enterprise Linux Server E4S (v. 7.2) librelp-1.2.0-4.el7_2
Red Hat Enterprise Linux Server Optional AUS (v. 7.2) librelp-devel-1.2.0-4.el7_2
Red Hat Enterprise Linux Server Optional E4S (v. 7.2) librelp-devel-1.2.0-4.el7_2
Red Hat Enterprise Linux Server Optional TUS (v. 7.2) librelp-devel-1.2.0-4.el7_2
Red Hat Enterprise Linux Server TUS (v. 7.2) librelp-1.2.0-4.el7_2

Fixes 1 record

TI-2018-15792 CVE-2018-1000140 · GHSA-m73v-c2p6-943p

rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in…

MEDIUM 54

rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.09342 Published 2018-03-23 Fixed CWE-787