vulnerability

SUSE: CVE-2019-7664: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
02/09/2019
Added
08/09/2024
Modified
08/09/2024

Description

In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).

Solution(s)

suse-upgrade-dwarvessuse-upgrade-elfutilssuse-upgrade-elfutils-langsuse-upgrade-libasm-develsuse-upgrade-libasm1suse-upgrade-libasm1-32bitsuse-upgrade-libdw-develsuse-upgrade-libdw1suse-upgrade-libdw1-32bitsuse-upgrade-libdwarves-develsuse-upgrade-libdwarves-devel-32bitsuse-upgrade-libdwarves1suse-upgrade-libdwarves1-32bitsuse-upgrade-libebl-develsuse-upgrade-libebl-pluginssuse-upgrade-libebl-plugins-32bitsuse-upgrade-libelf-develsuse-upgrade-libelf-devel-32bitsuse-upgrade-libelf1suse-upgrade-libelf1-32bit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.