CVE-2014-0172

Medium

Description

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

SeverityMedium

CVSS6.8

Exploit probability—

ProductElfutils

PublishedApr 11, 2014

First seenApr 11, 2014

How to fix

Vendor advisories

security.gentoo.org/glsa/201612-32

Affected products

Product	Affected versions	Fixed in
elfutils_project elfutils	0.153, 0.154, 0.155, 0.156, 0.157, 0.158	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.