CVE-2018-16403 libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an....
MediumCVSS 5.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/elfutils(Debian:12) | < 0.175-1 | 0.175-1 |
| debian/elfutils(Debian:13) | < 0.175-1 | 0.175-1 |
| debian/elfutils(Debian:14) | < 0.175-1 | 0.175-1 |
| elfutils project elfutils | = 0.173 | No fix listed |
| alpine/elfutils(Alpine:v3.12) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.13) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.14) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.15) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.16) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.17) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.18) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.19) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.20) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.21) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.22) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.23) | < 0.174-r0 | 0.174-r0 |
| alpine/elfutils(Alpine:v3.24) | < 0.174-r0 | 0.174-r0 |
References
- Debian Security Tracker CVE-2018-16403 vendor-advisory
- openSUSE-SU-2019:1590 vendor-advisory
- RHSA-2019:2197 vendor-advisory
- sourceware.org exploit issue-tracking third-party-advisory
- sourceware.org
- USN-4012-1 vendor-advisory
- security.alpinelinux.org vendor-advisory