CVE-2019-7146

2019-01-2900:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.004 Low

EPSS

Percentile

72.2%

JSON

In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.12-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.13-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.14-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.15-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.16-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.17-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.18-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.19-mainnoarchelfutils< 0.176-r0UNKNOWN
Alpine3.20-mainnoarchelfutils< 0.176-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.12-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.13-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.14-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.15-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.16-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.17-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.18-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.19-main	noarch	elfutils	< 0.176-r0	UNKNOWN
Alpine	3.20-main	noarch	elfutils	< 0.176-r0	UNKNOWN

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for ALPINE:CVE-2019-7146