Red Hat · Elfutils · CVE-2019-7148
**Name of the Vulnerable Software and Affected Versions**
elfutils versions 0.174
**Description**
The issue is related to the function `read long names()` in the elfutils utility for modifying and analyzing ELF binary files. It involves excessive memory allocation, which can be exploited by remote attackers to cause a denial-of-service via crafted ELF input, leading to an out-of-memory exception.
**Recommendations**
For elfutils version 0.174, consider setting ASAN OPTIONS=allocator may return null=1 to mitigate the risk of out-of-memory exceptions, as the maintainers suggest this may prevent the issue from occurring.