[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248678

 
 

909

 
 

195426

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2014-345 ---- elfutils

ID: oval:org.secpod.oval:def:1600085Date: (C)2016-01-07   (M)2022-10-10
Class: PATCHFamily: unix




Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

Platform:
Amazon Linux AMI
Product:
elfutils
Reference:
ALAS-2014-345
CVE-2014-0172
CVE    1
CVE-2014-0172
CPE    8
cpe:/a:elfutils_project:elfutils:0.157
cpe:/o:amazon:linux
cpe:/a:elfutils_project:elfutils:0.156
cpe:/a:elfutils_project:elfutils
...

© SecPod Technologies