SUSE CVE-2019-7148

An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers...

elfutils:fuzz-libdwfl: Crash in read_long_names

Detailed Report: https://oss-fuzz.com/testcase?key=5787862593830912 Project: elfutils Fuzzing Engine: afl Fuzz Target: fuzz-libdwfl Job Type: aflasanelfutils Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7fdae5ef5000 Crash State: readlongnames libelfnextarhdrwrlock dupelf Sanitizer:...

Elfutils read_long_names Buffer Overflow DoS

The vulnerability of the readlongnames function in the ELF file modification and analysis utility Elfutils is related to excessive memory allocation. Exploiting this vulnerability can allow an attacker to trigger an “out-of-memory” exception, resulting in a service failure...

CVE-2019-7148: Allocation of Resources Without Limits or Throttling

An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers...

CVE-2019-7148

An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers...

lib32-elfutils: directory traversal

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...

CVE-2014-9447

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...

CVE-2014-9447: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...