Back to Database
Status published
Medium
CVE-2017-7610
The check_group function in elflint.c in elfutils 0.168 allows remote...
Vulnerability Description
The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-7610
Credits & Attribution
No credits recorded in the NVD database.
References
- https://usn.ubuntu.com/3670-1/
- https://blogs.gentoo.org/ago/2017/04/03/elfutils-heap-based-buffer-overflow-in-check_group-elflint-c
- https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html
- https://security.gentoo.org/glsa/201710-10
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html
More from elfutils project
View All →CVE-2021-33294
In elfutils 0.183, an infinite loop was found in the...
Medium
5.5
CVE-2020-21047
The libcpu component which is used by libasm of elfutils...
Medium
5.5
CVE-2019-7665
In elfutils 0.175, a heap-based buffer over-read was discovered in...
Medium
5.5
CVE-2019-7664
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note...
Medium
5.5
CVE-2019-7150
An issue was discovered in elfutils 0.175. A segmentation fault...
Medium
5.5
Affected Vendor
elfutils project
View all reports →Affected Software
elfutils, debian linux, ubuntu linux
Vulnerable Versions:
0.168, 8.0, 14.04, 16.04
Timeline
Official Publish:
April 9th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.