ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-16402

PoC —
CVSS 3.1
9.8 critical
EPSS
4%p89
Published
()
Modified
Description

libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.

Vendors
elfutils projectdebianredhatopensusecanonical
Products
elfutils, debian linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation, leap, ubuntu linux
Weakness
CWE-415
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news

No ingested article mentions this CVE yet.