PT-2018-1913 · Red Hat+5 · Elfutils+6
Wcventure
·
Published
2018-10-10
·
Updated
2024-06-15
·
CVE-2018-18310
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
elfutils versions through 0.174
Description
The issue is caused by an invalid memory address dereference in the
dwfl segment report module.c file of the libdwfl library in elfutils. This can lead to a denial of service, where an attacker can cause the application to crash using a specially crafted ELF file. The vulnerability is demonstrated by the consider notes function.Recommendations
For versions through 0.174, consider updating to a version that fixes the issue, as no specific workaround is provided for these versions.
As a temporary workaround, consider restricting the use of specially crafted ELF files to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Linuxmint
Red Hat
Suse
Ubuntu
Elfutils