Red Hat Security AdvisoryRHSA-2019:3575
elfutils security, bug fix, and enhancement update
Released 2019-11-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) elfutils-devel-static-0.176-5.el8, elfutils-libelf-devel-static-0.176-5.el8
- Red Hat Enterprise Linux BaseOS (v. 8) elfutils-0.176-5.el8, elfutils-default-yama-scope-0.176-5.el8, elfutils-devel-0.176-5.el8 +3
Fixes 5 records
Priority LOW 33
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01972 · Published 2019-01-29 · Fixed CWE-125
Priority LOW 28
An issue was discovered in elfutils 0.175.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01328 · Published 2019-01-29 · Partial fix CWE-125
Priority LOW 28
In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0152 · Published 2019-01-29 · Fixed CWE-125
Priority LOW 27
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0126 · Published 2019-02-09 · Partial fix CWE-125
Priority LOW 27
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01022 · Published 2019-02-09 · Partial fix CWE-787
THREATIST.IORead the docs