CVE-2018-16403

Published: Sep 3, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://sourceware.org/git/?p=elfutils.git%3Ba=commit%3Bh=6983e59b727458a6c64d9659c85f08218bc4fcda

x_refsource_MISC

https://sourceware.org/bugzilla/show_bug.cgi?id=23529

x_refsource_MISC

USN-4012-1

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2019:1590

vendor-advisory

x_refsource_SUSE

RHSA-2019:2197

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-16403

Description

Affected Products

References