CVE

Id
67581  
CVE No.
CVE-2014-0172  
Status
Candidate  
Description
Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
651844 67581 CVE-2014-0172 MLIST:[elfutils-devel] 20140409 [PATCH] CVE-2014-0172 Check for overflow before calling malloc to uncompress data.  View
651845 67581 CVE-2014-0172 URL:https://lists.fedorahosted.org/pipermail/elfutils-devel/2014-April/003921.html  View
651846 67581 CVE-2014-0172 MLIST:[oss-security] 20140409 Heap-based buffer overflow in libdw/elfutils (CVE-2014-0172)  View
651847 67581 CVE-2014-0172 URL:http://seclists.org/oss-sec/2014/q2/54  View
651848 67581 CVE-2014-0172 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1085663  View
651849 67581 CVE-2014-0172 UBUNTU:USN-2188-1  View
651850 67581 CVE-2014-0172 URL:http://www.ubuntu.com/usn/USN-2188-1  View
651851 67581 CVE-2014-0172 BID:66714  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14373 JVNDB-2014-003248 Red Hat CloudForms Management Engine の app/controllers/application_controller.rb におけるサービス運用妨害 (DoS) の脆弱性 Red Hat CloudForms Management Engine (CFME) の app/controllers/application_controller.rb の wait_for_task 関数におけるサービス運用妨害 (無限ループおよび CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2014-0180 67581 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003248.html  View