EUVD-2018-7919

Malware in sbrugna...

The vulnerability of the dwarf_getaranges function in the dwarf_getaranges.c file of the ELF object processing utility Elfutils, related to reading beyond the allowable buffer data size, allows a attacker to cause a service failure.

The vulnerability in the dwarfgetaranges.c function of the ELF object processing utility Elfutils relates to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Buffer Over-Read

The elfutils package is vulnerable to heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges through a malicious file...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. It causes a heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges via a malicious file...

elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

An out-of-bounds read was discovered in elfutils in the way it reads DWARF address ranges information. Function dwarfgetaranges in dwarfgetaranges.c does not properly check whether it reads beyond the limits of the ELF section. An attacker could use this flaw to cause a denial of service via a...

ALPINE-CVE-2018-16062

dwarfgetaranges in dwarfgetaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

CVE-2018-16062

dwarfgetaranges in dwarfgetaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

elfutils denial of service vulnerability

elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. libdw is one of these libraries. A security vulnerability exists in the 'dwarfgetaranges' function in the dwarfgetaranges.c file of libdw in versions of elfutils prior to 2018-08-18. A remote...

UBUNTU-CVE-2018-16062

dwarfgetaranges in dwarfgetaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...