6.6 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.3%
In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.
access.redhat.com/errata/RHSA-2019:3575
sourceware.org/bugzilla/show_bug.cgi?id=24075
sourceware.org/bugzilla/show_bug.cgi?id=24081