Lucene search

K

Veracode Vulnerability DatabaseVERACODE:27104

HistorySep 21, 2020 - 6:35 a.m.

Denial Of Service (DoS)

2020-09-2106:35:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

8

0.007 Low

EPSS

Percentile

80.7%

elfutils is vulnerable to denial of service (DoS). The vulnerability exists as a heap-based buffer over-read could occur through the handle_gnu_hash function in readelf.c with an ELF file.

CPENameOperatorVersion
elfutils:trustyeq0.158-0ubuntu5
elfutils:xenialeq0.165-3ubuntu1
elfutils:trustyeq0.158-0ubuntu5
elfutils:xenialeq0.165-3ubuntu1

References

lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html

www.securityfocus.com/bid/98608

blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-handle_gnu_hash-readelf-c

security.gentoo.org/glsa/201710-10

usn.ubuntu.com/3670-1/

0.007 Low

EPSS

Percentile

80.7%

Related for VERACODE:27104

cve1 redhatcve1 prion1 nvd1 debiancve1 ubuntucve1 cvelist1 alpinelinux1 osv1 openvas12 nessus16 fedora2 ubuntu1 mageia2 gentoo1 suse3 ibm1