ALT-PU-2020-4263: package elfutils update to version 0.178.0.15.5de5-alt1
Описание
This update upgrades elfutils to version 0.178.0.15.5de5-alt1.
Устраненные уязвимости2
Связанные уязвимости
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.
The libcpu component which is used by libasm of elfutils version 0.177 ...
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.
Уязвимость компонента libcpu утилиты для модификации и анализа бинарных файлов ELF Elfutils, связанная с записью за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании