Lucene search

K
osvGoogleOSV:CVE-2019-7149
HistoryJan 29, 2019 - 12:29 a.m.

CVE-2019-7149

2019-01-2900:29:00
Google
osv.dev
6

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.