CVE-2017-7613 PUBLISHED

elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.

EPSS 0.61% · 69.7th percentile

Risk Scores

EPSS Score
0.61%
69.7th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSelfutils0.170-0.3, 0.170-0.2, 0.170-0.1
Ubuntu:14.04:LTSelfutils0.158-0ubuntu5, 0.158-0ubuntu5.1, 0.158-0ubuntu5.2
Ubuntu:16.04:LTSelfutils0.165-3, 0.165-3ubuntu1, 0.164-1

Timeline

References

Open in Interactive Console →