elfutils is vulnerable to denial of service (DoS). The vulnerability exist through a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl.
CPE | Name | Operator | Version |
---|---|---|---|
elfutils | eq | 0.174__6.el8 |
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
access.redhat.com/errata/RHSA-2019:3575
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=1674430
bugzilla.redhat.com/show_bug.cgi?id=1705138
sourceware.org/bugzilla/show_bug.cgi?id=24075
sourceware.org/bugzilla/show_bug.cgi?id=24081