PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2018-1000140

CVE-2018-1000140

librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c

Loading…

Severity

Critical

Red Hat Product Security

8.1

CVSS 3.0

Review impact separately from score.

Published · March 23, 2018

Updated · November 22, 2025

Description

A stack-based buffer overflow was found in the way librelp parses X.509 certificates. By connecting or accepting connections from a remote peer, an attacker may use a specially crafted X.509 certificate to exploit this flaw and potentially execute arbitrary code.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Users are strongly advised not to expose their logging RELP services to a public network.

CVSS / CWE

CVSS 3.0 · 8.1
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-121 · Stack-based Buffer Overflow