Segmentation fault in elfutils - CVE-2018-18310

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU15371

Segmentation fault in elfutils - CVE-2018-18310

Published: October 15, 2018 / Updated: October 16, 2018


Vulnerability identifier: #VU15371
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-18310
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists in the dwfl_segment_report_module.c source code file in the libdwfl library due to improper handling of Executable and Linkable Format (ELF) files. A local attacker can send an ELF file that submits malicious input, execute the eu-stack command, trigger a segmentation fault and cause the affected application to crash.


Affected software

elfutils
Arch Linux
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
SUSE Linux Enterprise Storage
Ubuntu
Opensuse
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
Fedora
elfutils (Alpine package)
libelf1 (Ubuntu package)
libdw1 (Ubuntu package)
libasm1 (Ubuntu package)
elfutils (Ubuntu package)
elfutils
elfutils (Red Hat package)
libasm1-32bit-debuginfo
libelf1-debuginfo
libdw1-32bit
libdw1-32bit-debuginfo
libebl-plugins-32bit
libebl-plugins-32bit-debuginfo
libelf-devel-32bit
libelf1-32bit
libelf1-32bit-debuginfo
elfutils-lang
libasm1-32bit
libelf1
libelf-devel
libebl-plugins-debuginfo
libebl-plugins
libebl-devel
elfutils-debuginfo
libdw1-debuginfo
libdw1
libdw-devel
libasm1-debuginfo
libasm1
libasm-devel
elfutils-debugsource
libdwarves1-32bit-debuginfo
libdwarves1-32bit
dwarves-debugsource
libdwarves-devel-32bit
dwarves-debuginfo
libdwarves1-debuginfo
dwarves
libdwarves1
libdwarves-devel
VMware Tanzu Operations Manager
Isolation Segment
VMware Tanzu Application Service for VMs

How to mitigate CVE-2018-18310

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

elfutils (Alpine package) - addressed in versions 0.168-r2, 0.178-r0
libelf1 (Ubuntu package) - addressed in versions Ubuntu Pro, 0.176-1.1ubuntu0.1
libdw1 (Ubuntu package) - addressed in versions Ubuntu Pro, 0.176-1.1ubuntu0.1
libasm1 (Ubuntu package) - addressed in versions Ubuntu Pro, 0.176-1.1ubuntu0.1
elfutils (Ubuntu package) - addressed in versions Ubuntu Pro, 0.176-1.1ubuntu0.1
elfutils - addressed in versions 0.174-5.fc28, 0.174-5.fc29
elfutils (Red Hat package) - update to 0.176-2.el7
libasm1-32bit-debuginfo - update to 0.177-150300.11.3.1
libelf1-debuginfo - update to 0.177-150300.11.3.1
libdw1-32bit - update to 0.177-150300.11.3.1
libdw1-32bit-debuginfo - update to 0.177-150300.11.3.1
elfutils - update to 0.177-150300.11.3.1
libebl-plugins-32bit - update to 0.177-150300.11.3.1
libebl-plugins-32bit-debuginfo - update to 0.177-150300.11.3.1
libelf-devel-32bit - update to 0.177-150300.11.3.1
libelf1-32bit - update to 0.177-150300.11.3.1
libelf1-32bit-debuginfo - update to 0.177-150300.11.3.1
elfutils-lang - update to 0.177-150300.11.3.1
libasm1-32bit - update to 0.177-150300.11.3.1
libelf1 - update to 0.177-150300.11.3.1
libelf-devel - update to 0.177-150300.11.3.1
libebl-plugins-debuginfo - update to 0.177-150300.11.3.1
libebl-plugins - update to 0.177-150300.11.3.1
libebl-devel - update to 0.177-150300.11.3.1
elfutils-debuginfo - update to 0.177-150300.11.3.1
libdw1-debuginfo - update to 0.177-150300.11.3.1
libdw1 - update to 0.177-150300.11.3.1
libdw-devel - update to 0.177-150300.11.3.1
libasm1-debuginfo - update to 0.177-150300.11.3.1
libasm1 - update to 0.177-150300.11.3.1
libasm-devel - update to 0.177-150300.11.3.1
elfutils-debugsource - update to 0.177-150300.11.3.1
libdwarves1-32bit-debuginfo - update to 1.22-150300.7.3.1
libdwarves1-32bit - update to 1.22-150300.7.3.1
dwarves-debugsource - update to 1.22-150300.7.3.1
libdwarves-devel-32bit - update to 1.22-150300.7.3.1
dwarves-debuginfo - update to 1.22-150300.7.3.1
libdwarves1-debuginfo - update to 1.22-150300.7.3.1
dwarves - update to 1.22-150300.7.3.1
libdwarves1 - update to 1.22-150300.7.3.1
libdwarves-devel - update to 1.22-150300.7.3.1
VMware Tanzu Operations Manager - update to 2.10.61
Isolation Segment - addressed in versions 3.0.17, 4.0.9
VMware Tanzu Application Service for VMs - addressed in versions 3.0.17, 4.0.9

External References

Related Security Bulletins