elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

A heap-based buffer over-read was discovered in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm...

The vulnerability of the read_srclines function in the elfutils package, related to reading buffers from outside the system, allows a hacker to cause a service failure.

The vulnerability of the readsrclines function in dwarfgetsrclines.c in elfutils is related to reading buffers outside of their intended scope. Exploiting this vulnerability could allow an attacker to cause a service failure by invoking a specially crafted ELF file...

PT-2019-1675 · Red Hat +5 · Elfutils +6

Name of the Vulnerable Software and Affected Versions: elfutils version 0.175 Description: A heap-based buffer over-read was discovered in the read srclines function in dwarf getsrclines.c in libdw in elfutils. This issue can be exploited by a crafted input, causing segmentation faults and leadin...