[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2019-7665 -- elfutils

ID: oval:org.secpod.oval:def:2001238Date: (C)2019-06-20   (M)2023-12-20
Class: VULNERABILITYFamily: unix




In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service because ebl_core_note does not reject malformed core file notes.

Platform:
Debian 8.x
Debian 9.x
Product:
elfutils
Reference:
CVE-2019-7665
CVE    1
CVE-2019-7665
CPE    5
cpe:/a:elfutils_project:elfutils
cpe:/a:elfutils_project:elfutils:0.175
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
...

© SecPod Technologies