Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-10-19T17:00:00

Updated: 2024-08-05T11:15:58.898Z

Reserved: 2018-10-19T00:00:00

Link: CVE-2018-18521

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-10-19T17:29:00.873

Modified: 2024-11-21T03:56:05.680

Link: CVE-2018-18521

cve-icon Redhat

Severity : Low

Publid Date: 2018-10-17T00:00:00Z

Links: CVE-2018-18521 - Bugzilla