CVE-2018-1000140

CVE-2018-1000140 affects rsyslog librelp up to 1.2.14, with a stack-based buffer overflow in relpTcpChkPeerName when validating peer x509 certificates. This can enable remote code execution by a crafted certificate; impact is high/remote, exploitable over network without authentication. Public re...