SUSE-SU-2019:1733-1: elfutils&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 03-07-2019Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2019:1733-1 is a vulnerability in elfutils&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 15 · Downstream 0 · Related 15
CVE-2016-10254CVE-2016-10255CVE-2017-7607CVE-2017-7608CVE-2017-7610CVE-2017-7611

Timeline

  1. 03-07-2019
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for elfutils This update for elfutils fixes the following issues: Security issues fixed: - CVE-2018-16403: Fixed a heap-based buffer over-read that could have led to Denial of Service (bsc#1107067). - CVE-2016-10254: Fixed a memory allocation failure in alloxate_elf (bsc#1030472). - CVE-2019-7665: NT_PLATFORM core file note should be a zero terminated string (bsc#1125007). - CVE-2016-10255: Fixed a memory allocation failure in libelf_set_rawdata_wrlock (bsc#1030476). - CVE-2019-7150: Added a missing check in dwfl_segment_report_module which could have allowed truncated files to be read (bsc#1123685). - CVE-2018-16062: Fixed a heap-buffer-overflow (bsc#1106390). - CVE-2017-7611: Fixed a heap-based buffer over-read that could have led to Denial of Service (bsc#1033088). - CVE-2017-7613: Fixed denial of service caused by the missing validation of the number of sections and the number of segments in a crafted ELF file (bsc#1033090). - CVE-2017-7607: Fixed a heap-based buffer overflow in handle_gnu_hash (bsc#1033084). - CVE-2017-7608: Fixed a heap-based buffer overflow in ebl_object_note_type_name() (bsc#1033085). - CVE-2017-7610: Fixed a heap-based buffer overflow in check_group (bsc#1033087). - CVE-2018-18521: Fixed multiple divide-by-zero vulnerabilities in function arlib_add_symbols() (bsc#1112723). - CVE-2017-7612: Fixed a denial of service in check_sysv_hash() via a crafted ELF file (bsc#1033089). - CVE-2018-18310: Fixed an invalid address read in dwfl_segment_report_module.c (bsc#1111973). - CVE-2018-18520: Fixed bad handling of ar files inside are files (bsc#1112726).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse8 products
  • elfutils&distro=SUSE Linux Enterprise Desktop 12 SP3< 0.158-7.7.2
  • elfutils&distro=SUSE Linux Enterprise Desktop 12 SP4< 0.158-7.7.2
  • elfutils&distro=SUSE Linux Enterprise Server 12 SP3< 0.158-7.7.2
  • elfutils&distro=SUSE Linux Enterprise Server 12 SP4< 0.158-7.7.2
  • elfutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 0.158-7.7.2

1 vendor · 8 products

References

31 links
Show all 31 references