Lucene search

K

Veracode Vulnerability DatabaseVERACODE:26888

HistorySep 21, 2020 - 6:24 a.m.

Denial Of Service (DoS)

2020-09-2106:24:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

10

0.006 Low

EPSS

Percentile

79.4%

elfutils is vulnerable to denial of service. A heap-based buffer over-read in the check_group function in elflint.c allow a remote attacker to cause crash the application using a malicious ELF file.

CPENameOperatorVersion
elfutils:trustyeq0.158-0ubuntu5
elfutils:xenialeq0.165-3ubuntu1
elfutils:trustyeq0.158-0ubuntu5
elfutils:xenialeq0.165-3ubuntu1

References

lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html

blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_group-elflint-c

lists.debian.org/debian-lts-announce/2019/02/msg00036.html

security.gentoo.org/glsa/201710-10

usn.ubuntu.com/3670-1/

0.006 Low

EPSS

Percentile

79.4%

Related for VERACODE:26888

prion1 osv2 cve1 cvelist1 ubuntucve1 redhatcve1 nvd1 debiancve1 nessus17 fedora2 openvas13 gentoo1 ubuntu1 mageia2 debian1 suse3 ibm1