Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2018-16062 PUBLISHED CVSS 5.5 MEDIUM

dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.13elfutils0.168-r2, 0, 0.168-r0
Alpine:v3.23elfutils0.168-r0, 0.168-r1, 0.168-r2
Alpine:v3.20elfutils0.168-r1, 0.168-r1, 0.168-r0
Alpine:v3.14elfutils0.168-r2, 0.168-r1, 0.168-r0
Alpine:v3.15elfutils0, 0.168-r0, 0.168-r1
Alpine:v3.19elfutils0, 0.168-r2, 0.168-r1
Alpine:v3.18elfutils0, 0.168-r0, 0.168-r1
Alpine:v3.21elfutils0.168-r0, 0.168-r2, 0.168-r1
Alpine:v3.22elfutils0, 0.168-r0, 0.168-r1
Alpine:v3.12elfutils0.168-r0, 0, 0.168-r2
Alpine:v3.17elfutils0.168-r2, 0.168-r2, 0.168-r1
Alpine:v3.16elfutils0.168-r1, 0, 0.168-r0

Timeline

References

Open in Interactive Console →