Unrated severityNVD Advisory· Published Jan 29, 2019· Updated Aug 4, 2024
CVE-2019-7148
CVE-2019-7148
Description
An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."
Affected products
120.174+ 1 more
- (no CPE)range: 0.174
- (no CPE)range: = 0.174
- osv-coords10 versionspkg:rpm/opensuse/dwarves&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/dwarves&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/opensuse/elfutils&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/elfutils&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/suse/dwarves&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/dwarves&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/dwarves&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/elfutils&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/elfutils&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/elfutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3
< 1.22-150300.7.3.1+ 9 more
- (no CPE)range: < 1.22-150300.7.3.1
- (no CPE)range: < 1.22-150300.7.3.1
- (no CPE)range: < 0.177-150300.11.3.1
- (no CPE)range: < 0.177-150300.11.3.1
- (no CPE)range: < 1.22-150300.7.3.1
- (no CPE)range: < 1.22-150300.7.3.1
- (no CPE)range: < 1.22-150300.7.3.1
- (no CPE)range: < 0.177-150300.11.3.1
- (no CPE)range: < 0.177-150300.11.3.1
- (no CPE)range: < 0.177-150300.11.3.1
Patches
Vulnerability mechanics
References
1- sourceware.org/bugzilla/show_bug.cgimitrex_refsource_MISC
News mentions
0No linked articles in our index yet.