Bug 872785 (CVE-2014-0172) - VUL-0: CVE-2014-0172: elfutils: Integer overflow in check_section()
Summary: VUL-0: CVE-2014-0172: elfutils: Integer overflow in check_section()
Status: RESOLVED FIXED
Alias: CVE-2014-0172
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Tony Jones
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/97712/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-04-09 13:14 UTC by Johannes Segitz
Modified: 2019-02-18 09:02 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
A possible patch from Mark Wielaard (561 bytes, patch)
2014-04-09 13:16 UTC, Johannes Segitz 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2014-04-09 13:14:20 UTC 
rh#1085663

The libdw library provides support for accessing DWARF debugging information inside ELF files. An integer overflow flaw in check_section(), leading to a heap-based buffer overflow, was found in the libdw library. A malicious ELF file could cause an application using libdw (such as eu-readelf) to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

This issue affects versions 0.153 and later.

Acknowledgements:

This issue was discovered by Florian Weimer of the Red Hat Product Security Team.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1085663
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0172
Comment 1 Johannes Segitz 2014-04-09 13:16:37 UTC 
Created attachment 585698 [details]
A possible patch from Mark Wielaard
Comment 2 Swamp Workflow Management 2014-04-09 22:00:29 UTC 
bugbot adjusting priority
Comment 3 Tony Jones 2014-07-30 00:57:30 UTC 
Fixed already in SLE12 and Factory.   Older SLE not affected.
Submitted for opensuse-maint as sr 242928
Comment 4 Bernhard Wiedemann 2014-07-30 01:00:13 UTC 
This is an autogenerated message for OBS integration:
This bug (872785) was mentioned in
https://build.opensuse.org/request/show/242928 13.1+12.3 / elfutils
Comment 5 Swamp Workflow Management 2014-08-11 08:04:42 UTC 
openSUSE-SU-2014:0974-1: An update that fixes one vulnerability is now available.

Category: security (low)
Bug References: 872785
CVE References: CVE-2014-0172
Sources used:
openSUSE 13.1 (src):    elfutils-0.155-6.4.1
openSUSE 12.3 (src):    elfutils-0.155-2.4.1
Comment 6 Swamp Workflow Management 2019-02-18 09:02:13 UTC 
This is an autogenerated message for OBS integration:
This bug (872785) was mentioned in
https://build.opensuse.org/request/show/676940 Factory / elfutils