REDHAT-BUG-1677538: Low severity elfutils vulnerability
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32xlatetom in elf32xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because eblcorenote does not reject malformed core file notes.
References: https://sourceware.org/bugzilla/showbug.cgi?id=24089 https://sourceware.org/ml/elfutils-devel/2019-q1/msg00049.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1677538?
The severity of REDHAT-BUG-1677538 is classified as a denial of service vulnerability due to potential program crashes.
How do I fix REDHAT-BUG-1677538?
To fix REDHAT-BUG-1677538, ensure you apply the latest patches or updates for elfutils provided by your software distributor.
What causes the vulnerability REDHAT-BUG-1677538?
REDHAT-BUG-1677538 is caused by a heap-based buffer over-read in the elf32_xlatetom function which can process malformed ELF input.
What software is affected by REDHAT-BUG-1677538?
The affected software for REDHAT-BUG-1677538 is elfutils version 0.175.
What are the potential consequences of REDHAT-BUG-1677538?
The potential consequences of REDHAT-BUG-1677538 include segmentation faults and denial of service, resulting in program crashes.