This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-7148 →
Categories
DEBIAN-CVE-2019-7148

An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers c...

Original description

The description as published by the source.

An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 elfutils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.176-1"}]}]
Debian:13 elfutils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.176-1"}]}]
Debian:14 elfutils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.176-1"}]}]

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details