[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB_R6Nu3vNC-JpK9fz1C4KZK8YxDC507kBcIBG_qR3bI":3,"g5a-risk:CVE-2018-1000140":295},{"success":4,"data":5,"meta":293},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":119,"references":120,"referencesCount":170,"weaknesses":171,"weaknessesCount":180,"isActivelyExploited":181,"cisaInfo":15,"otxData":15,"relatedBlogPosts":182,"seoMetadata":183,"configurations":208,"relatedVendorCves":277,"notableEvents":278},"CVE-2018-1000140","What is CVE-2018-1000140?","rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.","rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remot...","2018-03-23T21:29:00.647","2023-06-12T07:15:09.813",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.09342,[39,39,39,39,39,39,39],"Critical",[43,48,53,56,61,66,69,72,74,78,81,84,87,90,94,96,98,101,103,106,108,110,112,114,117],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"rsyslog","librelp","*","cpe:2.3:a:rsyslog:librelp:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"redhat","enterprise_linux_desktop","6.0","cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":67,"criteria":68,"vulnerable":4},"7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":62,"product":70,"version":64,"criteria":71,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":62,"product":70,"version":67,"criteria":73,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":62,"product":75,"version":76,"criteria":77,"vulnerable":4},"enterprise_linux_server_aus","6.6","cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",{"vendor":62,"product":75,"version":79,"criteria":80,"vulnerable":4},"7.2","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",{"vendor":62,"product":75,"version":82,"criteria":83,"vulnerable":4},"7.3","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",{"vendor":62,"product":75,"version":85,"criteria":86,"vulnerable":4},"7.4","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",{"vendor":62,"product":75,"version":88,"criteria":89,"vulnerable":4},"7.6","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",{"vendor":62,"product":91,"version":92,"criteria":93,"vulnerable":4},"enterprise_linux_server_eus","6.7","cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",{"vendor":62,"product":91,"version":82,"criteria":95,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",{"vendor":62,"product":91,"version":85,"criteria":97,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",{"vendor":62,"product":91,"version":99,"criteria":100,"vulnerable":4},"7.5","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",{"vendor":62,"product":91,"version":88,"criteria":102,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",{"vendor":62,"product":104,"version":76,"criteria":105,"vulnerable":4},"enterprise_linux_server_tus","cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",{"vendor":62,"product":104,"version":79,"criteria":107,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",{"vendor":62,"product":104,"version":82,"criteria":109,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",{"vendor":62,"product":104,"version":85,"criteria":111,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",{"vendor":62,"product":104,"version":88,"criteria":113,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",{"vendor":62,"product":115,"version":64,"criteria":116,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",{"vendor":62,"product":115,"version":67,"criteria":118,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",25,[121,125,130,133,136,139,142,145,148,153,158,162,166],{"url":122,"source":123,"tags":124},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F172829\u002Flibrelp-Remote-Code-Execution.html","Packetstormsecurity",[],{"url":126,"source":127,"tags":128},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1223","Red Hat",[129],"Third Party Advisory",{"url":131,"source":127,"tags":132},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1225",[129],{"url":134,"source":127,"tags":135},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1701",[129],{"url":137,"source":127,"tags":138},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1702",[129],{"url":140,"source":127,"tags":141},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1703",[129],{"url":143,"source":127,"tags":144},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1704",[129],{"url":146,"source":127,"tags":147},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1707",[129],{"url":149,"source":150,"tags":151},"https:\u002F\u002Fgithub.com\u002Frsyslog\u002Flibrelp\u002Fblob\u002F532aa362f0f7a8d037505b0a27a1df452f9bac9e\u002Fsrc\u002Ftcp.c#L1205","GitHub",[152,129],"Patch",{"url":154,"source":155,"tags":156},"https:\u002F\u002Flgtm.com\u002Frules\u002F1505913226124\u002F","Lgtm",[157,129],"Exploit",{"url":159,"source":160,"tags":161},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201804-21","Gentoo",[129],{"url":163,"source":164,"tags":165},"https:\u002F\u002Fusn.ubuntu.com\u002F3612-1\u002F","Ubuntu",[129],{"url":167,"source":168,"tags":169},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4151","Debian",[129],13,[172],{"id":173,"name":174,"description":175,"extendedDescription":176,"status":177,"abstraction":178,"structure":179},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":184,"metaDescription":185,"keywords":186,"canonicalUrl":187,"structuredData":188},"What is CVE-2018-1000140? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1000140, a critical severity cyber security vulnerability from 2018. rsyslog librelp version 1.2.14 and earlier contains a...","CVE-2018-1000140, CVE-2018-1000140 vulnerability, CVE-2018-1000140 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, rsyslog security, debian security, canonical security, redhat security, librelp vulnerability, debian_linux vulnerability, ubuntu_linux vulnerability, enterprise_linux_desktop vulnerability","\u002Fwhat-is\u002Fcve-2018-1000140",{"@context":189,"@type":190,"headline":184,"description":185,"datePublished":10,"dateModified":11,"author":191,"publisher":195,"about":199,"mainEntityOfPage":203,"articleSection":206,"keywords":207},"https:\u002F\u002Fschema.org","TechArticle",{"@type":192,"name":193,"url":194},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":192,"name":193,"url":194,"logo":196},{"@type":197,"url":198},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":200,"name":6,"description":201,"additionalType":202},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":204,"@id":205},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1000140","Cybersecurity","CVE-2018-1000140, CVE-2018-1000140 vulnerability, CVE-2018-1000140 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[209,217,225,231],{"Operator":15,"Negate":15,"Nodes":210},[211],{"Operator":212,"Negate":15,"CPEMatch":213},"OR",[214],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":215,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":216},"55960842-7464-4000-92D0-DD6774302375","1.2.14",{"Operator":15,"Negate":15,"Nodes":218},[219],{"Operator":212,"Negate":15,"CPEMatch":220},[221,223],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":222,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":224,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":226},[227],{"Operator":212,"Negate":15,"CPEMatch":228},[229],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":230,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Operator":15,"Negate":15,"Nodes":232},[233],{"Operator":212,"Negate":15,"CPEMatch":234},[235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,269,271,273,275],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":238,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":240,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":242,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":244,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"16E6D998-B41D-4B49-9E00-8336D2E40A4A",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":246,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1C8D871B-AEA1-4407-AEE3-47EC782250FF",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":248,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"98381E61-F082-4302-B51F-5648884F998B",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":250,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D99A687E-EAE6-417E-A88E-D0082BC194CD",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":252,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B353CE99-D57C-465B-AAB0-73EF581127D1",{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":254,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6C81647C-9A53-481D-A54C-36770A093F90",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":256,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A8442C20-41F9-47FD-9A12-E724D3A31FD7",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":258,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":260,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",{"Vulnerable":4,"Criteria":102,"MatchCriteriaID":262,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BF77CDCF-B9C9-427D-B2BF-36650FB2148C",{"Vulnerable":4,"Criteria":105,"MatchCriteriaID":264,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"13E02156-E748-4820-B76F-7074793837E1",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":266,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6755B6AD-0422-467B-8115-34A60B1D1A40",{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":268,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":270,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D5F7E11E-FB34-4467-8919-2B6BEAABF665",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":272,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":274,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E5ED5807-55B7-47C5-97A6-03233F4FBC3A",{"Vulnerable":4,"Criteria":118,"MatchCriteriaID":276,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"825ECE2D-E232-46E0-A047-074B34DB1E97",[],[279,286],{"id":280,"eventType":281,"eventTime":282,"details":283,"label":284,"color":285},"db03e442-24c3-4e28-a95f-3f3c4ba909b7","LOW_EPSS_DELTA","2025-12-02T04:06:11.749955+00:00","Daily EPSS score decreased by 0.111 on 2023-12-30","EPSS Score Decreased","green",{"id":287,"eventType":288,"eventTime":289,"details":290,"label":291,"color":292},"9c0a4eaf-a0ae-4a21-bd7a-55220cda6efe","HIGH_EPSS_DELTA","2025-12-03T04:06:09.701674+00:00","Daily EPSS score increased by 0.111 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":294,"version":33},1792356245081,{"score":296,"band":297,"action":298,"scoredAt":299},65,"Medium","Plan remediation","2026-10-16T06:43:40.415566+00:00"]