CVE-2018-18521: Divide by Zero
A flaw was found in elfutils 0.174. A Divide-by-zero vulnerabilities in the function arlibaddsymbols() in arlib.c allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero shentsize is mishandled.
References: https://sourceware.org/bugzilla/showbug.cgi?id=23786 https://sourceware.org/ml/elfutils-devel/2018-q4/msg00055.html
Upstream Patch: https://sourceware.org/git/?p=elfutils.git;a=commit;h=2b16a9be69939822dcafe075413468daac98b327
Other sources
Divide-by-zero vulnerabilities in the function arlibaddsymbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero shentsize is mishandled.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-18521?
CVE-2018-18521 is classified as a denial of service vulnerability that can cause an application crash.
How do I fix CVE-2018-18521?
To fix CVE-2018-18521, upgrade elfutils to version 0.183-1 or later.
Which versions of elfutils are affected by CVE-2018-18521?
CVE-2018-18521 affects elfutils version 0.174 and earlier.
Can CVE-2018-18521 be exploited remotely?
Yes, CVE-2018-18521 can be exploited remotely using a crafted ELF file.
What specific function in elfutils is vulnerable in CVE-2018-18521?
The function arlib_add_symbols() in arlib.c is where the divide-by-zero vulnerability occurs.