CVE-2017-7607

2017-04-0914:59:00

Alpine Linux Development Team

security.alpinelinux.org

0.007 Low

EPSS

Percentile

80.5%

JSON

The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.10-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.11-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.12-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.13-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.14-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.15-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.16-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.17-mainnoarchelfutils< 0.168-r1UNKNOWN
Alpine3.18-mainnoarchelfutils< 0.168-r1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.10-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.11-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.12-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.13-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.14-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.15-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.16-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.17-main	noarch	elfutils	< 0.168-r1	UNKNOWN
Alpine	3.18-main	noarch	elfutils	< 0.168-r1	UNKNOWN