CVE-2018-16062

CVE-2018-16062 affects elfutils (libdw/dwarf_getaranges.c) where the function dwarf_getaranges() can read beyond ELF section limits, allowing a crafted file to cause a denial of service via a heap-based buffer over-read. Public advisories and vendor notes link this to elfutils releases prior to 2...

CVE-2018-16402

CVE-2018-16402 affects elfutils (libelf/elf_end.c) where double decompression of sections can lead to a denial of service or application crash. Affected upstream version is 0.173. Public advisories confirm a remediation path: upgrade elfutils to newer releases (e.g., 0.176) across affected platfo...

CVE-2018-18520

CVE-2018-18520 – elfutils (libelf): In elfutils up to v0.174, the function elf_end mishandles recursive ar files (eu-size/handle_ar in size.c) by closing the outer ar file before finishing inner entries, enabling an invalid memory access that can crash the application (denial of service). This is...

CVE-2018-18310

CVE-2018-18310 is an invalid memory address dereference in libdwfl/dwfl_segment_report_module.c of elfutils (through v0.174) that can cause a denial of service (application crash) when processing a crafted ELF file. Connected advisories confirm the issue and indicate that upstream fixes exist in ...

CVE-2018-16403

CVE-2018-16403 affects elfutils 0.173. The vulnerability is a heap-based buffer over-read in libdw, specifically in dwarf_getabbrev.c and dwarf_hasattr.c, which can lead to an application crash when processing crafted files. The issue is confirmed by multiple advisories (e.g., RHSA-2019:2197; ALA...

CVE-2018-18521

The CVE-2018-18521 issue is a confirmed vulnerability in elfutils: a Divide-by-Zero in arlib_add_symbols() (arlib.c) when processing crafted ELF files, caused by a mishandled zero sh_entsize. This can lead to denial of service (application crash). Affected upstream releases prior to fix include e...

CVE-2018-8769

CVE-2018-8769 affects elfutils version 0.170. The vulnerability is a buffer over-read in the function ebl_dynamic_tag_name (libebl/ebldynamictagname.c) when SYMTAB_SHNDX is unsupported. Multiple sources (NVD, CNVD, OSV, CVE lists) concur on the underlying cause and description. The issue is tied ...