CVE:CVE-2019-7150
CNNVD:CNNVD-201901-946
elfutils是一套用于读取、创建和修改ELF二进制文件的实用程序和库的集合。
elfutils 0.175版本中的libelf/elf32_xlatetom.c文件的‘elf64_xlatetom’函数存在安全漏洞，该漏洞源于在读取core文件数据时，程序没有检查是否获取了全部数据。攻击者可借助特制的输入利用该漏洞造成拒绝服务（程序崩溃）。
solution:Upgrade elfutils_project elfutils to a higher version than 0.175,and avoid the version 0.175; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0