CVE:CVE-2018-18521
CNNVD:CNNVD-201810-1107
elfutils是一套用于读取、创建和修改ELF二进制文件的实用程序和库的集合。
elfutils 0.174版本中的arlib.c文件的‘arlib_add_symbols()’函数存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade elfutils_project elfutils to a higher version than 0.174,and avoid the version 0.174; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10