Lucene search

K
redhatcveRedhat.comRH:CVE-2018-1000140
HistoryOct 11, 2019 - 10:34 a.m.

CVE-2018-1000140

2019-10-1110:34:55
redhat.com
access.redhat.com
14

0.39 Low

EPSS

Percentile

97.3%

A stack-based buffer overflow was found in the way librelp parses X.509 certificates. By connecting or accepting connections from a remote peer, an attacker may use a specially crafted X.509 certificate to exploit this flaw and potentially execute arbitrary code.

Mitigation

Users are strongly advised not to expose their logging RELP services to a public network.