SB2018042511 - Red Hat update for librelp
Published: April 25, 2018
Security Bulletin ID
SB2018042511
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Stack-based buffer overflow (CVE-ID: CVE-2018-1000140)
The vulnerability allows a remote unauthenticated attacker to execute arbitrary code on the target system.The weakness exists in the relpTcpChkPeerName function due to insufficient validation of X.509 certificates and improper checks on the return value. A remote attacker can send a specially crafted X.509 certificate, trigger stack-based buffer overflow and execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
Remediation
Install update from vendor's website.