CVE-2019-14249

Published: Jul 24, 2019Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.

Affected (1)

Products: Libdwarf Project: Libdwarf

Libdwarf Project

1 product

Libdwarf

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libdwarf Project Libdwarf	Before 2019-07-05

Related CWEs

CWE-369

Divide By Zero

The product divides a value by zero.

References (6)

http://www.securityfocus.com/bid/109380

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://sourceforge.net/p/libdwarf/code/ci/cb7198abde46c2ae29957ad460da6886eaa606ba/tree/libdwarf/dwarf_elf_load_headers.c?diff=99e77c3894877a1dd80b82808d8309eded4e5599

Source: cve@mitre.org

PatchThird Party Advisory

https://sourceforge.net/p/libdwarf/code/merge-requests/4/

Source: cve@mitre.org

PatchThird Party Advisory

http://www.securityfocus.com/bid/109380

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://sourceforge.net/p/libdwarf/code/ci/cb7198abde46c2ae29957ad460da6886eaa606ba/tree/libdwarf/dwarf_elf_load_headers.c?diff=99e77c3894877a1dd80b82808d8309eded4e5599

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://sourceforge.net/p/libdwarf/code/merge-requests/4/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.