Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-10254

Опубликовано: 23 мар. 2017
Источник: debian
EPSS Низкий

Описание

The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
elfutilsfixed0.168-0.2package
elfutilsno-dsajessiepackage
elfutilsno-dsawheezypackage

Примечания

  • 0.168-0.2 first version uploaded to unstable

  • https://blogs.gentoo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-allocate_elf-common-h/

  • https://git.fedorahosted.org/cgit/elfutils.git/commit/?id=191000fdedba3fafe4d5b8cddad3f3318b49c3fb

EPSS

Процентиль: 76%
0.01573
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 9 лет назад

The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.

CVSS3: 3.3
redhat
около 10 лет назад

The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.

CVSS3: 5.5
nvd
больше 9 лет назад

The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.

CVSS3: 5.5
github
больше 4 лет назад

The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.

CVSS3: 5.5
altlinux
почти 10 лет назад

ALT-PU-2016-2315: package `elfutils` update to version 0.167.0.13.507e7-alt1

EPSS

Процентиль: 76%
0.01573
Низкий