UBUNTU-CVE-2019-7664
Dashboard / Vulnerabilities / UBUNTU-CVE-2019-7664
Summary:
Details: In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).
References: https://ubuntu.com/security/CVE-2019-7664, https://www.cve.org/CVERecord?id=CVE-2019-7664
Affected packages
Package
Name: elfutils
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -0.165-3ubuntu1.1
Affected versions
0.163-4ubuntu1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
