Lucene search

K

Veracode Vulnerability DatabaseVERACODE:26826

HistorySep 21, 2020 - 6:20 a.m.

Buffer Overflow

2020-09-2106:20:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

8

0.006 Low

EPSS

Percentile

79.4%

elfutils is vulnerable to buffer overflow. The check_symtab_shndx function in elflint.c in elfutils allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

CPENameOperatorVersion
elfutils:trustyeq0.158-0ubuntu5
elfutils:xenialeq0.165-3ubuntu1
elfutils:trustyeq0.158-0ubuntu5
elfutils:xenialeq0.165-3ubuntu1

References

lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html

blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_symtab_shndx-elflint-c

lists.debian.org/debian-lts-announce/2019/02/msg00036.html

security.gentoo.org/glsa/201710-10

usn.ubuntu.com/3670-1/

0.006 Low

EPSS

Percentile

79.4%

Related for VERACODE:26826

redhatcve1 nvd1 cve1 ubuntucve1 prion1 debiancve1 osv2 cvelist1 openvas13 nessus17 fedora2 ubuntu1 mageia2 gentoo1 debian1 suse3 ibm1