Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

elfutils project elfutils 0.175 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2019-7146
In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.
Elfutils Project Elfutils 0.175
6.5
CVSSv3
CVE-2019-7149
A heap-based buffer over-read exists in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
Elfutils Project Elfutils 0.175Debian Debian Linux 8.0
5.5
CVSSv3
CVE-2018-16403
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
Elfutils Project Elfutils 0.173
6.5
CVSSv3
CVE-2019-7148
An attempted excessive memory allocation exists in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The ...
Elfutils Project Elfutils 0.174
9.8
CVSSv3
CVE-2018-16402
libelf/elf_end.c in elfutils 0.173 allows remote malicious users to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
Elfutils Project Elfutils 0.173Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Opensuse Leap 15.0Opensuse Leap 15.1Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 16.04
5.5
CVSSv3
CVE-2018-18310
An invalid memory address dereference exists in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows malicious users to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by consider_notes.
Elfutils Project ElfutilsDebian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Opensuse Leap 15.0Opensuse Leap 15.1Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
5.5
CVSSv3
CVE-2018-16062
dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils prior to 2018-08-18 allows remote malicious users to cause a denial of service (heap-based buffer over-read) via a crafted file.
Elfutils Project ElfutilsDebian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.0Opensuse Leap 15.1Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 16.04Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0
6.5
CVSSv3
CVE-2018-18520
An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes the outer ar file before handling all inner entries. The vulnerability allows ma...
Elfutils Project ElfutilsDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Opensuse Leap 15.0Opensuse Leap 15.1Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0
5.5
CVSSv3
CVE-2018-18521
Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote malicious users to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.
Elfutils Project Elfutils 0.174Debian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Opensuse Leap 15.0Opensuse Leap 15.1Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
5.5
CVSSv3
CVE-2019-7664
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).
Elfutils Project Elfutils 0.175Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook