Lucene search

CVE-2018-16403

🗓️ 03 Sep 2018 00:00:00Reported by ubuntu.comType

libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev.c and dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash

Reporter	Title	Published	Views	Family All 71
OSV	CVE-2018-16403	3 Sep 201819:29	–	osv
OSV	Red Hat Security Advisory: elfutils security, bug fix, and enhancement update	16 Sep 202402:14	–	osv
OSV	elfutils vulnerabilities	30 Aug 202316:29	–	osv
NVD	CVE-2018-16403	3 Sep 201819:29	–	nvd
Debian CVE	CVE-2018-16403	3 Sep 201819:29	–	debiancve
Cvelist	CVE-2018-16403	3 Sep 201819:00	–	cvelist
Prion	Heap overflow	3 Sep 201819:29	–	prion
OpenVAS	Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2020-1634)	16 Jun 202000:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2019-2313)	23 Jan 202000:00	–	openvas
OpenVAS	Fedora Update for elfutils FEDORA-2018-1eec1f0d17	3 Oct 201800:00	–	openvas

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-4012-1
ubuntu	www.ubuntu.com/security/notices/USN-6322-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-16403
launchpad	www.launchpad.net/bugs/cve/CVE-2018-16403
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-16403

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	elfutils	0.170-0.4ubuntu0.1	UNKNOWN
ubuntu	18.10	noarch	elfutils	0.170-0.5.0ubuntu1.1	UNKNOWN
ubuntu	14.04	noarch	elfutils	0.158-0ubuntu5.3+esm1	UNKNOWN
ubuntu	16.04	noarch	elfutils	0.165-3ubuntu1.2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Sep 2018 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS24.3

CVSS35.5

EPSS0.002

elfutils heap-based buffer bugzilla