CVE-2017-7613
elfutils: elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote...
CVE-2017-7613 is fixed in 4 products on 1 platform, first by elfutils 0.170-0.4, released April 8, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0170
77th percentile
elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| elfutils · Ubuntu 18.04.6 LTS (bionic) | 0.170-0.4 | elfutils 0.170-0.4 | Apr 8, 2017 |
| libasm1 · Ubuntu 18.04.6 LTS (bionic) | 0.170-0.4 | libasm1 0.170-0.4 | Apr 8, 2017 |
| libdw1 · Ubuntu 18.04.6 LTS (bionic) | 0.170-0.4 | libdw1 0.170-0.4 | Apr 8, 2017 |
| libelf1 · Ubuntu 18.04.6 LTS (bionic) | 0.170-0.4 | libelf1 0.170-0.4 | Apr 8, 2017 |