CVE-2014-0172
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
92.4%
Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| elfutils_project | elfutils | 0.153 | cpe:2.3:a:elfutils_project:elfutils:0.153:*:*:*:*:*:*:* |
| elfutils_project | elfutils | 0.154 | cpe:2.3:a:elfutils_project:elfutils:0.154:*:*:*:*:*:*:* |
| elfutils_project | elfutils | 0.155 | cpe:2.3:a:elfutils_project:elfutils:0.155:*:*:*:*:*:*:* |
| elfutils_project | elfutils | 0.156 | cpe:2.3:a:elfutils_project:elfutils:0.156:*:*:*:*:*:*:* |
| elfutils_project | elfutils | 0.157 | cpe:2.3:a:elfutils_project:elfutils:0.157:*:*:*:*:*:*:* |
| elfutils_project | elfutils | 0.158 | cpe:2.3:a:elfutils_project:elfutils:0.158:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
92.4%