CVE-2017-7609

elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:elfutils_project:elfutils:0.168:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-04-09 14:59

Updated : 2024-02-04 19:11


NVD link : CVE-2017-7609

Mitre link : CVE-2017-7609

CVE.ORG link : CVE-2017-7609


JSON object : View

Products Affected

elfutils_project

  • elfutils
CWE
CWE-20

Improper Input Validation