Wind River Support Network

HomeDefectsLIN10-3642
Fixed

LIN10-3642 : Security Advisory - rsyslog&librelp - CVE-2018-1000140

Created: Apr 2, 2018    Updated: Dec 3, 2018
Resolved Date: Apr 8, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.6
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.

https://nvd.nist.gov/vuln/detail/CVE-2018-1000140

Other Downloads


CVEs


Live chat
Online