vulnerability

SUSE: CVE-2019-7146: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
01/29/2019
Added
08/09/2024
Modified
08/09/2024

Description

In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.

Solution(s)

suse-upgrade-dwarvessuse-upgrade-elfutilssuse-upgrade-elfutils-langsuse-upgrade-libasm-develsuse-upgrade-libasm1suse-upgrade-libasm1-32bitsuse-upgrade-libdw-develsuse-upgrade-libdw1suse-upgrade-libdw1-32bitsuse-upgrade-libdwarves-develsuse-upgrade-libdwarves-devel-32bitsuse-upgrade-libdwarves1suse-upgrade-libdwarves1-32bitsuse-upgrade-libebl-develsuse-upgrade-libebl-pluginssuse-upgrade-libebl-plugins-32bitsuse-upgrade-libelf-develsuse-upgrade-libelf-devel-32bitsuse-upgrade-libelf1suse-upgrade-libelf1-32bit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.