Описание
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 0.170-0.4ubuntu0.1 |
| cosmic | released | 0.170-0.5.0ubuntu1.1 |
| devel | not-affected | 0.176-1.1 |
| disco | not-affected | 0.176-1 |
| eoan | not-affected | 0.176-1.1 |
| esm-infra-legacy/trusty | released | 0.158-0ubuntu5.3+esm1 |
| esm-infra/bionic | released | 0.170-0.4ubuntu0.1 |
| esm-infra/focal | not-affected | 0.176-1.1 |
| esm-infra/xenial | released | 0.165-3ubuntu1.2 |
| focal | not-affected | 0.176-1.1 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
A heap-based buffer over-read was discovered in the function read_srcl ...
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
Уязвимость функции read_srclines в пакете elfutils, связанная с чтением за границей буфера, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3