SecuritySpace - CVE-2019-7148

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2019-7148

Description: An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial- of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."

Test IDs: 1.3.6.1.4.1.25623.1.1.2.2020.1055 1.3.6.1.4.1.25623.1.1.2.2019.2523 1.3.6.1.4.1.25623.1.1.2.2019.2102

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2019-7148
https://sourceware.org/bugzilla/show_bug.cgi?id=24085

CVE ID:	CVE-2019-7148
Description:	An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial- of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2020.1055 1.3.6.1.4.1.25623.1.1.2.2019.2523 1.3.6.1.4.1.25623.1.1.2.2019.2102
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-7148 https://sourceware.org/bugzilla/show_bug.cgi?id=24085