Red Hat Security Advisory: elfutils security, bug fix, and enhancement update

Fixed packages 36

Vulnerabilities 10

• Unscored —
  CVE-2018-16062

  dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial…

  elfutils elfutils elfutils Debian Ubuntu Alpine
  Aug 29, 2018
• Unscored —
  CVE-2018-16402

  libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application cr…

  elfutils elfutils elfutils Debian Ubuntu Alpine
  Sep 3, 2018
• Unscored —
  CVE-2018-16403

  libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and d…

  elfutils elfutils elfutils Debian Ubuntu Alpine
  Sep 3, 2018
• Unscored —
  CVE-2018-18310

  An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.…

  elfutils elfutils Debian Ubuntu
  Oct 15, 2018
• Unscored —
  CVE-2018-18520

  An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-…

  elfutils elfutils Debian Ubuntu
  Oct 19, 2018
• Unscored —
  CVE-2018-18521

  Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers …

  elfutils elfutils Debian Ubuntu
  Oct 19, 2018
• Unscored —
  CVE-2019-7149

  A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils …

  elfutils elfutils elfutils Debian Ubuntu Alpine
  Jan 29, 2019
• Unscored —
  CVE-2019-7150

  An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf3…

  elfutils elfutils elfutils Debian Ubuntu Alpine
  Jan 29, 2019
• Unscored —
  CVE-2019-7664

  In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect …

  elfutils elfutils Debian Alpine
  Feb 9, 2019
• Unscored —
  CVE-2019-7665

  In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in l…

  elfutils elfutils elfutils Debian Ubuntu Alpine
  Feb 9, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#low
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623752
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1625050
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1625055
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642604
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646477
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671443
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1671446
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1677536
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1677538
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1704754
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2197.json
• report
  https://access.redhat.com/security/cve/CVE-2018-16062
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16062
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16062
• report
  https://access.redhat.com/security/cve/CVE-2018-16402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16402
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16402
• report
  https://access.redhat.com/security/cve/CVE-2018-16403
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-16403
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-16403
• report
  https://access.redhat.com/security/cve/CVE-2018-18310
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18310
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18310
• report
  https://access.redhat.com/security/cve/CVE-2018-18520
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18520
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18520
• report
  https://access.redhat.com/security/cve/CVE-2018-18521
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18521
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18521
• report
  https://access.redhat.com/security/cve/CVE-2019-7149
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-7149
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-7149
• report
  https://access.redhat.com/security/cve/CVE-2019-7150
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-7150
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-7150
• report
  https://access.redhat.com/security/cve/CVE-2019-7664