PT-2018-3617 · Red Hat+5 · Elfutils+6

Wcventure · Published 2018-08-15 · Updated 2023-08-30 · CVE-2018-16403

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions elfutils version 0.173

Description The issue is related to incorrect checking of the end of the attributes list in the libdw library of the elfutils package, specifically in the dwarf getabbrev function in dwarf getabbrev.c and the dwarf hasattr function in dwarf hasattr.c. This can lead to a heap-based buffer over-read and cause an application crash. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For elfutils version 0.173, consider updating to a newer version that includes a fix for this issue, as the current version is affected by the incorrect checking of the attributes list end, which can cause a heap-based buffer over-read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-2328

BDU:2021-01386

CESA-2019_2197

CVE-2018-16403

MGASA-2019-0222

OPENSUSE-SU-2019:1590-1

OPENSUSE-SU-2019_1590-1

OPENSUSE-SU-2022_2614-1

RHSA-2019:2197

RHSA-2019_2197

SUSE-SU-2019:1486-1

SUSE-SU-2019:1733-1

SUSE-SU-2019_1486-1

SUSE-SU-2022:2614-1

SUSE-SU-2022:2614-2

USN-4012-1

USN-6322-1

Affected Products

Alt Linux

Centos

Linuxmint

Red Hat

Suse

Ubuntu

Elfutils

References · 173

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=23529 · Exploit
• https://ubuntu.com/security/notices/USN-4012-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01385 · Security Note
• https://osv.dev/vulnerability/USN-6322-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01386 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/Z6QQTO2CLXUBNNOX4DEZ5XXWJYV3SYVN · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16403 · Security Note
• https://bdu.fstec.ru/vul/2021-01428 · Security Note
• https://access.redhat.com/errata/RHSA-2019:2197 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01633 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21047 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18520 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16403 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-2328 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16402 · Vendor Advisory