Buffer Over-read Vulnerability in elfutils 0.175

CVE-2019-7146 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.

Learn more about our Web Application Penetration Testing UK.