Lucene search
PRIOn knowledge basePRION:CVE-2019-7150HistoryJan 29, 2019 - 12:29 a.m.
Code injection
2019-01-2900:29:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf32_xlatetom.c, due to dwfl_segment_report_module not checking whether the dyn data read from a core file is truncated. A crafted input can cause a program crash, leading to denial-of-service, as demonstrated by eu-stack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 18.10 | |
| ubuntu_linux | eq | 16.04 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| elfutils | eq | 0.175 | |
| leap | eq | 15.0 | |
| leap | eq | 15.1 | |
| enterprise_linux | eq | 8.0 | |
| enterprise_linux_desktop | eq | 7.0 |
References
lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html
access.redhat.com/errata/RHSA-2019:2197
access.redhat.com/errata/RHSA-2019:3575
lists.debian.org/debian-lts-announce/2019/02/msg00036.html
lists.debian.org/debian-lts-announce/2021/10/msg00030.html
sourceware.org/bugzilla/show_bug.cgi?id=24103
sourceware.org/ml/elfutils-devel/2019-q1/msg00070.html
usn.ubuntu.com/4012-1/
Related
ubuntucve
ubuntucve
CVE-2019-7150
2019-01-28 00:00:00
debiancve
debiancve
CVE-2019-7150
2019-01-29 00:29:00
cvelist
cvelist
CVE-2019-7150
2019-01-29 00:00:00
redhatcve
redhatcve
CVE-2019-7150
2019-01-31 15:50:33
nvd
nvd
CVE-2019-7150
2019-01-29 00:29:00
alpinelinux
alpinelinux
CVE-2019-7150
2019-01-29 00:29:00
veracode
veracode
Denial Of Service (DoS)
2019-08-08 00:07:56
osv
osv
CVE-2019-7150
2019-01-29 00:29:00
elfutils - security update
2021-10-30 00:00:00
elfutils vulnerabilities
2023-08-30 16:29:23
cve
cve
CVE-2019-7150
2019-01-29 00:29:00
nessus
nessus
Photon OS 2.0: Elfutils PHSA-2019-2.0-0164
2019-06-24 00:00:00
Photon OS 1.0: Elfutils PHSA-2019-1.0-0239
2019-06-24 00:00:00
RHEL 8 : elfutils (RHSA-2019:3575)
2019-11-06 00:00:00
archlinux
archlinux
[ASA-201903-9] libelf: denial of service
2019-03-18 00:00:00
redhat
redhat
(RHSA-2019:3575) Low: elfutils security, bug fix, and enhancement update
2019-11-05 18:02:56
(RHSA-2019:2197) Low: elfutils security, bug fix, and enhancement update
2019-08-06 08:12:18
oraclelinux
oraclelinux
elfutils security, bug fix, and enhancement update
2019-11-14 00:00:00
elfutils security, bug fix, and enhancement update
2019-08-13 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2019-2141)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-2802-1)
2021-11-01 00:00:00
Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2020-1448)
2020-04-16 00:00:00
debian
debian
[SECURITY] [DLA 2802-1] elfutils security update
2021-10-30 21:53:24
[SECURITY] [DLA 1689-1] elfutils security update
2019-02-25 21:35:38
ubuntu
ubuntu
elfutils vulnerabilities
2019-06-10 00:00:00
elfutils vulnerabilities
2023-08-30 00:00:00
cloudfoundry
cloudfoundry
USN-4012-1: elfutils vulnerabilities | Cloud Foundry
2019-06-18 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: elfutils-0.176-1.fc29
2019-02-18 02:05:55
f5
f5
K21426934 : Multiple elfutils vulnerabilities
2022-04-25 00:00:00
photon
photon
amazon
amazon
Low: elfutils
2019-10-21 18:01:00
centos
centos
elfutils security update
2019-08-30 02:43:56
suse
suse
Security update for elfutils (moderate)
2019-06-20 00:00:00
Security update for dwarves and elfutils (moderate)
2022-09-01 00:00:00
Security update for dwarves and elfutils (moderate)
2022-08-01 00:00:00
mageia
mageia
Updated elfutils packages fix security vulnerabilities
2019-08-18 15:39:41