CVE-2018-1000140: rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509...

Security readout for executives and security teams

This flaw affects librelp, a library used with rsyslog for RELP logging. A remote peer could send a specially crafted x509 certificate and trigger a stack buffer overflow. The CVE description says this can result in remote code execution, so exposed logging receivers should be treated as urgent. Most exposure is likely on systems using rsyslog with librelp and TLS/x509 peer certificate handling, especially RELP listeners reachable from untrusted networks. Systems not using librelp, RELP, or certificate-based peer checks are less likely exposed. Prioritize remediation on internet-facing or broadly reachable logging infrastructure. A compromised logging collector can affect monitoring integrity and may become a foothold into operational networks. Mitigation focus: Identify rsyslog deployments using librelp 1.2.14 or earlier.; Apply vendor updates from Ubuntu, Gentoo, Debian, Red Hat, or your OS supplier.; Restrict RELP listener access to trusted log sources only..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.