Read the docs
TI-2019-05067 Aliases CVE-2019-7148GHSA-67vc-2q9c-6854

An attempted excessive memory allocation was discovered in the function read_long_names…

Priority LOW 32CWE-770Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-770.

Summary

An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."

Why it matters now

EPSS 0.01598 75th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:elfutils_project:elfutils:0.174:*:*:*:*:*:*:*0.174VulnerableElfutils Project
  • cpe:2.3:a:elfutils_project:elfutils:0.174:*:*:*:*:*:*:* Versions 0.174 Vulnerable ·Elfutils Project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 4 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-7148
  2. 2026-10-03 Alias added: GHSA-67vc-2q9c-6854

References

Exploit 1

  • TI-2021-12787 In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c… CVSS 3.1MEDIUM 5.5
  • TI-2020-13973 The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e)… CVSS 3.1MEDIUM 5.5
  • TI-2025-01176 GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference CVSS 4.0MEDIUM 4.8
  • TI-2024-16666 elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c. CVSS 3.1MEDIUM 4.0
  • TI-2018-11755 libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service… CVSS 3.1CRITICAL 9.8
  • TI-2014-00166 Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library… CVSS 2.0MEDIUM 6.8
See all 32 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences