CVE-2018-16403

Publication date

2018-09-03 19:00:00

Family

mitre

State

PUBLISHED

Description

libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.