In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade elfutils | Aug 22, 2024 | Jan 29, 2019 |
| Centos_linux | — | Upgrade elfutils-libelf-develUpgrade elfutils-default-yama-scopeUpgrade elfutils-libelf-debuginfoUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-debugsourceUpgrade elfutils-libs-debuginfoUpgrade elfutils-libelfUpgrade elfutils-debuginfoUpgrade elfutils-libs | Nov 6, 2019 | Jan 29, 2019 |
| Debian | — | Upgrade elfutils | Feb 14, 2019 | Feb 14, 2019 |
| Oracle_linux | — | Upgrade elfutils-libelfUpgrade elfutils-default-yama-scopeUpgrade elfutilsUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libelf-develUpgrade elfutils-libsUpgrade elfutils-devel-staticUpgrade elfutils-devel | Oct 5, 2022 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade elfutils-libelf-debuginfoUpgrade elfutils-default-yama-scopeUpgrade elfutils-debuginfoUpgrade elfutils-libelfUpgrade elfutils-debugsourceUpgrade elfutils-libs-debuginfoUpgrade elfutilsUpgrade elfutils-libelf-devel-staticUpgrade elfutils-devel-staticUpgrade elfutils-libsUpgrade elfutils-libelf-develUpgrade elfutils-devel | Nov 6, 2019 | Jan 29, 2019 |
| Suse | — | Upgrade libasm1-32bitUpgrade libebl-plugins-32bitUpgrade libdwarves-develUpgrade libdw-develUpgrade libasm-develUpgrade libdwarves1-32bitUpgrade libdw1Upgrade libdw1-32bitUpgrade elfutilsUpgrade libasm1Upgrade libelf-devel-32bitUpgrade libelf-develUpgrade dwarvesUpgrade libelf1Upgrade libebl-develUpgrade libdwarves1Upgrade libdwarves-devel-32bitUpgrade elfutils-langUpgrade libelf1-32bitUpgrade libebl-plugins | Aug 9, 2024 | Jan 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub