CVE-2018-8769 — Out-of-bounds Read in Project Elfutils

CWE-125 — Out-of-bounds Read7 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 61.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Elfutils Project Elfutils
Timeline
PublishedMar 18
Latest updateMay 13

Description

elfutils 0.170 has a buffer over-read in the ebl_dynamic_tag_name function of libebl/ebldynamictagname.c because SYMTAB_SHNDX is unsupported.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

Patches

Patch: sourceware.org ↗Patch: sourceware.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-4qj2-w4f3-j3q6: elfutils 0↗2022-05-13
▶
CVEList
CVE-2018-8769: elfutils 0↗2018-03-18
▶

📋Vendor Advisories

2
Red Hat
elfutils: buffer over-read in ebldynamictagname.c:ebl_dynamic_tag_name() allows for denial of service↗2018-03-18
▶
Debian
CVE-2018-8769: elfutils - elfutils 0.170 has a buffer over-read in the ebl_dynamic_tag_name function of li...↗2018
▶

💬Community

2
Bugzilla
CVE-2018-8769 elfutils: buffer over-read in ebldynamictagname.c:ebl_dynamic_tag_name() allows for denial of service [fedora-all]↗2018-03-22
▶
Bugzilla
CVE-2018-8769 elfutils: buffer over-read in ebldynamictagname.c:ebl_dynamic_tag_name() allows for denial of service↗2018-03-22
▶
CVE-2018-8769 — Out-of-bounds Read in Project Elfutils | cvebase