CVE-2018-1000140 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-1000140 Interim 1 39 2023-09-13T00:14:25Z current 2021-05-30T14:20:27Z 2023-09-13T00:14:25Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-1000140 rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00061.html E-Mail link for SUSE-SU-2018:0822-1 https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00063.html E-Mail link for SUSE-SU-2018:0828-1 https://lists.suse.com/pipermail/sle-security-updates/2022-May/011210.html E-Mail link for SUSE-SU-2022:1891-1 https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00064.html E-Mail link for openSUSE-SU-2018:0829-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed librelp librelp-devel librelp-devel-1.10.0-1.5 librelp-devel-1.2.12-3.3.1 librelp-devel-1.2.15-1.15 librelp-devel-1.2.7-3.3.1 librelp0 librelp0-1.10.0-1.5 librelp0-1.2.12-3.3.1 librelp0-1.2.15-1.15 librelp0-1.2.15-3.6.3 librelp0-1.2.7-3.3.1 librelp0-1.2.15-3.6.3 as a component of HPE Helion OpenStack 8 librelp0-1.2.12-3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 librelp-devel-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 librelp0-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 librelp-devel-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 librelp0-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 librelp-devel-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 librelp0-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 librelp-devel-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 librelp0-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 librelp-devel-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 librelp0-1.2.15-1.15 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 librelp0-1.2.7-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS librelp0-1.2.7-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP2 librelp0-1.2.12-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server 12 SP3-BCL librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA librelp0-1.2.12-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server 12 SP5 librelp0-1.2.7-3.3.1 as a component of SUSE Linux Enterprise Server 12-LTSS librelp0-1.2.7-3.3.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 librelp0-1.2.7-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 librelp0-1.2.7-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 librelp0-1.2.15-3.6.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 librelp-devel-1.2.7-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 librelp-devel-1.2.12-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 librelp-devel-1.2.12-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 librelp-devel-1.2.12-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 librelp0-1.2.7-3.3.1 as a component of SUSE OpenStack Cloud 6 librelp0-1.2.15-3.6.3 as a component of SUSE OpenStack Cloud 8 librelp0-1.2.15-3.6.3 as a component of SUSE OpenStack Cloud 9 librelp0-1.2.15-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 8 librelp0-1.2.15-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 9 librelp-devel-1.10.0-1.5 as a component of openSUSE Tumbleweed librelp0-1.10.0-1.5 as a component of openSUSE Tumbleweed librelp-devel as a component of SUSE CaaS Platform 4.0 librelp0 as a component of SUSE CaaS Platform 4.0 librelp as a component of SUSE CaaS Platform 4.0 librelp as a component of SUSE Enterprise Storage 6 librelp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS librelp0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS librelp as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS librelp-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS librelp0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS librelp as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS librelp-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 librelp0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 librelp as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 librelp as a component of SUSE Linux Enterprise Server 11 SP3 LTSS librelp as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata librelp0 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS librelp as a component of SUSE Linux Enterprise Server 11 SP4-LTSS librelp-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS librelp0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS librelp as a component of SUSE Linux Enterprise Server 15 SP1-LTSS librelp as a component of SUSE Linux Enterprise Server 15-ESPOS librelp-devel as a component of SUSE Linux Enterprise Server 15-LTSS librelp0 as a component of SUSE Linux Enterprise Server 15-LTSS librelp as a component of SUSE Linux Enterprise Server 15-LTSS librelp as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 librelp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 librelp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 librelp0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 librelp as a component of SUSE Linux Enterprise Server for SAP Applications 15 librelp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 librelp0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 librelp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 librelp-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 librelp as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 librelp as a component of SUSE Manager Proxy 4.0 librelp as a component of SUSE Manager Retail Branch Server 4.0 librelp as a component of SUSE Manager Server 4.0 rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate. CVE-2018-1000140 HPE Helion OpenStack 8:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise High Performance Computing 12 SP5:librelp0-1.2.12-3.3.1 SUSE Linux Enterprise Module for Server Applications 15:librelp-devel-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15:librelp0-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP1:librelp-devel-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP1:librelp0-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP2:librelp-devel-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP2:librelp0-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP3:librelp-devel-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP3:librelp0-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP4:librelp-devel-1.2.15-1.15 SUSE Linux Enterprise Module for Server Applications 15 SP4:librelp0-1.2.15-1.15 SUSE Linux Enterprise Server 12 SP1-LTSS:librelp0-1.2.7-3.3.1 SUSE Linux Enterprise Server 12 SP2:librelp0-1.2.7-3.3.1 SUSE Linux Enterprise Server 12 SP3:librelp0-1.2.12-3.3.1 SUSE Linux Enterprise Server 12 SP3-BCL:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server 12 SP3-ESPOS:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server 12 SP3-LTSS:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server 12 SP3-TERADATA:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server 12 SP4:librelp0-1.2.12-3.3.1 SUSE Linux Enterprise Server 12 SP4-ESPOS:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server 12 SP4-LTSS:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server 12 SP5:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server 12-LTSS:librelp0-1.2.7-3.3.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:librelp0-1.2.7-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:librelp0-1.2.7-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:librelp0-1.2.7-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Server for SAP Applications 12 SP5:librelp0-1.2.15-3.6.3 SUSE Linux Enterprise Software Development Kit 12 SP2:librelp-devel-1.2.7-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:librelp-devel-1.2.12-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:librelp-devel-1.2.12-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:librelp-devel-1.2.12-3.3.1 SUSE OpenStack Cloud 6:librelp0-1.2.7-3.3.1 SUSE OpenStack Cloud 8:librelp0-1.2.15-3.6.3 SUSE OpenStack Cloud 9:librelp0-1.2.15-3.6.3 SUSE OpenStack Cloud Crowbar 8:librelp0-1.2.15-3.6.3 SUSE OpenStack Cloud Crowbar 9:librelp0-1.2.15-3.6.3 openSUSE Tumbleweed:librelp-devel-1.10.0-1.5 openSUSE Tumbleweed:librelp0-1.10.0-1.5 SUSE CaaS Platform 4.0:librelp SUSE CaaS Platform 4.0:librelp-devel SUSE CaaS Platform 4.0:librelp0 SUSE Enterprise Storage 6:librelp SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:librelp SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:librelp-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:librelp0 SUSE Linux Enterprise High Performance Computing 15-LTSS:librelp SUSE Linux Enterprise High Performance Computing 15-LTSS:librelp-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:librelp0 SUSE Linux Enterprise Module for Server Applications 15 SP2:librelp SUSE Linux Enterprise Module for Server Applications 15 SP2:librelp-devel SUSE Linux Enterprise Module for Server Applications 15 SP2:librelp0 SUSE Linux Enterprise Server 11 SP3 LTSS:librelp SUSE Linux Enterprise Server 11 SP3 for Teradata:librelp SUSE Linux Enterprise Server 11 SP4-LTSS:librelp SUSE Linux Enterprise Server 11 SP4-LTSS:librelp0 SUSE Linux Enterprise Server 15 SP1-LTSS:librelp SUSE Linux Enterprise Server 15 SP1-LTSS:librelp-devel SUSE Linux Enterprise Server 15 SP1-LTSS:librelp0 SUSE Linux Enterprise Server 15-ESPOS:librelp SUSE Linux Enterprise Server 15-LTSS:librelp SUSE Linux Enterprise Server 15-LTSS:librelp-devel SUSE Linux Enterprise Server 15-LTSS:librelp0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:librelp SUSE Linux Enterprise Server for SAP Applications 15 SP1:librelp SUSE Linux Enterprise Server for SAP Applications 15 SP1:librelp-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:librelp0 SUSE Linux Enterprise Server for SAP Applications 15:librelp SUSE Linux Enterprise Server for SAP Applications 15:librelp-devel SUSE Linux Enterprise Server for SAP Applications 15:librelp0 SUSE Linux Enterprise Software Development Kit 11 SP4:librelp SUSE Linux Enterprise Software Development Kit 11 SP4:librelp-devel SUSE Manager Proxy 4.0:librelp SUSE Manager Retail Branch Server 4.0:librelp SUSE Manager Server 4.0:librelp SUSE Linux Enterprise Server for SAP Applications 12 SP5:librelp critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H