Lucene search
+L

7 matches found

RedHat Linux
RedHat Linux
•added 2019/08/06 12:54 p.m.•20 views

elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

5.5CVSS7.2AI score0.01407EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2019/08/06 12:54 p.m.•17 views

elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64xlatetom in libelf/elf32xlatetom.c, due to dwflsegmentreportmodule not checking whether the dyn data read from a core file is truncated. A crafted input can cause a program crash, leading to...

5.5CVSS6.9AI score0.01382EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2018/12/20 12:00 a.m.•13 views

The vulnerability of the libdwfl library in the ELF Elfutils utility for modifying and analyzing binary files allows a attacker to cause a service failure.

The vulnerability of the libdwfl library’s dwflsegmentreportmodule.c file, a tool for modifying and analyzing binary ELF files, is due to a buffer overflow segmentation fault. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created ELF file...

5.5CVSS6.7AI score0.01407EPSS
SaveExploits1References10Affected Software5
OSV
OSV
•added 2018/10/15 2:29 a.m.•7 views

DEBIAN-CVE-2018-18310

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

5.5CVSS6AI score0.01407EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2018/10/15 2:00 a.m.•55 views

CVE-2018-18310

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

5.5CVSS5.7AI score0.01407EPSS
SaveExploits1
OSV
OSV
•added 2018/10/14 12:00 a.m.•13 views

UBUNTU-CVE-2018-18310

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

5.5CVSS6.5AI score0.01407EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2018/10/10 12:00 a.m.•2 views

PT-2018-1913

Name of the Vulnerable Software and Affected Versions elfutils versions through 0.174 Description The issue is caused by an invalid memory address dereference in the dwfl segment report module.c file of the libdwfl library in elfutils. This can lead to a denial of service, where an attacker can...

5.5CVSS0.01407EPSS
SaveExploits1References191
Rows per page
Query Builder