CVE-2019-7149

A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175

published January 29, 2019

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01972 · 80.3th percentile
Published
2019-01-29T00:00Z
EPSS history
Timeline
  • 29 JAN 00:00Z
    A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175
    cvelistv5