CVE-2018-18521

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2197Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00036.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/10/msg00030.htmlMailing List, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=23786Exploit, Issue Tracking, Third Party Advisory
https://sourceware.org/ml/elfutils-devel/2018-q4/msg00055.htmlMailing List, Patch, Third Party Advisory
https://usn.ubuntu.com/4012-1/Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2197Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00036.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/10/msg00030.htmlMailing List, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=23786Exploit, Issue Tracking, Third Party Advisory
https://sourceware.org/ml/elfutils-devel/2018-q4/msg00055.htmlMailing List, Patch, Third Party Advisory
https://usn.ubuntu.com/4012-1/Third Party Advisory

Timeline

Published: Oct 19, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-185246.1Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code und CVE-2018-185279.8OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.CVE-2018-185299.8ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles th CVE-2018-18536.1IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By CVE-2018-185309.8ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate CVE-2018-185319.8text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 us CVE-2018-185357.8The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs CVE-2018-185367.8The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. Th CVE-2018-185375.5The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.CVE-2018-185406.1TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL.CVE-2018-185417.5In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote CVE-2018-185446.5There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coder