medium5.5
CVE-2019-7664
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check.
Impact
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elfutils Project | Elfutils | Version 0.175 |
| Redhat | Enterprise Linux | Version 8.0 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Eus | Versions 8.1, 8.2, 8.4, 8.6 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Server Aus | Versions 8.2, 8.4, 8.6 |
| Redhat | Enterprise Linux Server Tus | Versions 8.2, 8.4, 8.6 |
| Redhat | Enterprise Linux Workstation | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2019:2197
- https://access.redhat.com/errata/RHSA-2019:3575
- https://sourceware.org/bugzilla/show_bug.cgi?id=24084
- https://access.redhat.com/errata/RHSA-2019:2197
- https://access.redhat.com/errata/RHSA-2019:3575
- https://sourceware.org/bugzilla/show_bug.cgi?id=24084