Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 531
Alerts This Week
Warning Icon 1 531

Debian DSA-4151-1 Critical: Librelp Buffer Overflow Exploit

debian
Calendar Grey March 26, 2018
Scroller Debian
Fedora issues update FSA-2023-0024 tackling severe memory leak in libxyz, enabling unauthorized access.
Bas van Schaik and Kevin Backhouse discovered a stack-based buffer overflow vulnerability in librelp, a library providing reliable event logging over the network, triggered while c...
Topics%20covered

Topics Covered

security advisory remote code execution debian critical flaw librelp

Summary

Details can be found in the upstream advisory:
https://www.rsyslog.com/cve-2018-1000140/

For the oldstable distribution (jessie), this problem has been fixed
in version 1.2.7-2+deb8u1.

For the stable distribution (stretch), this problem has been fixed in
version 1.2.12-1+deb9u1.

We recommend that you upgrade your librelp packages.

For the detailed security status of librelp please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/librelp

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: librelp
CVE ID: CVE-2018-1000140

Topics%20covered

Topics Covered

security advisory remote code execution debian critical flaw librelp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.