Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-0172

Опубликовано: 11 апр. 2014
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:elfutils_project:elfutils:0.153:*:*:*:*:*:*:*
cpe:2.3:a:elfutils_project:elfutils:0.154:*:*:*:*:*:*:*
cpe:2.3:a:elfutils_project:elfutils:0.155:*:*:*:*:*:*:*
cpe:2.3:a:elfutils_project:elfutils:0.156:*:*:*:*:*:*:*
cpe:2.3:a:elfutils_project:elfutils:0.157:*:*:*:*:*:*:*
cpe:2.3:a:elfutils_project:elfutils:0.158:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.01832
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
почти 12 лет назад

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

redhat
почти 12 лет назад

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

debian
почти 12 лет назад

Integer overflow in the check_section function in dwarf_begin_elf.c in ...

github
больше 3 лет назад

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

EPSS

Процентиль: 83%
0.01832
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189