Wind River Support Network

HomeDefectsLIN10-4860
Fixed

LIN10-4860 : Security Advisory - elfutils - CVE-2018-18310

Created: Oct 30, 2018    Updated: Dec 16, 2018
Resolved Date: Nov 8, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.13
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

A vulnerability in the libdwfl library of elfutils could allow a local attacker to cause a denial of service (DoS) condition on a targeted system.

The vulnerability exists in the dwfl_segment_report_module.c source code file in the libdwfl library of the affected software and is due to improper handling of Executable and Linkable Format (ELF) files. An attacker could exploit this vulnerability by sending an ELF file that submits malicious input to the targeted system and by executing the eu-stack command. A successful exploit could trigger a segmentation fault and cause the affected application to crash, resulting in a DoS condition.

Other Downloads


CVEs


Live chat
Online