CVE Vulnerabilities

CVE-2018-18521

Divide By Zero

Published: Oct 19, 2018 | Modified: Nov 30, 2021
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Elfutils Elfutils_project 0.174 (including) 0.174 (including)

References