SUSE CVE-2019-7148

An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers...

The vulnerability of the read_long_names() function in the modification and analysis tools for binary ELF files, Elfutils, allows a perpetrator to cause a service failure.

The vulnerability of the readlongnames function in the ELF file modification and analysis utility Elfutils is related to excessive memory allocation. Exploiting this vulnerability can allow an attacker to trigger an “out-of-memory” exception, resulting in a service failure...

lib32-elfutils: directory traversal

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...