CVE-2019-7149

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://access.redhat.com/errata/RHSA-2019:2197
https://access.redhat.com/errata/RHSA-2019:3575
https://lists.debian.org/debian-lts-announce/2019/02/msg00036.htmlMailing List, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=24102Exploit, Issue Tracking, Third Party Advisory
https://sourceware.org/ml/elfutils-devel/2019-q1/msg00068.htmlMailing List, Patch, Third Party Advisory
https://usn.ubuntu.com/4012-1/
https://access.redhat.com/errata/RHSA-2019:2197
https://access.redhat.com/errata/RHSA-2019:3575
https://lists.debian.org/debian-lts-announce/2019/02/msg00036.htmlMailing List, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=24102Exploit, Issue Tracking, Third Party Advisory
https://sourceware.org/ml/elfutils-devel/2019-q1/msg00068.htmlMailing List, Patch, Third Party Advisory
https://usn.ubuntu.com/4012-1/

Timeline

Published: Jan 29, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-71505.5An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf32_xlatetom.c, due to CVE-2019-71516.5A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause CVE-2019-71526.5A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::Wasm CVE-2019-71536.5A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBin CVE-2019-71546.5The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an err CVE-2019-71556.5An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befor CVE-2019-71566.5In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.CVE-2019-71589.8OX App Suite 7.10.0 and earlier has Incorrect Access Control.CVE-2019-71597.5OX App Suite 7.10.1 and earlier allows Information Exposure.CVE-2019-71609.8idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execut CVE-2019-71617.5An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information,CVE-2019-71629.1An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed service allows an unauthenticated person to retri