CVE-2019-14249

dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-07-24

Last modified

2024-08-05

Weaknesses

CWE-369

Affected products

• Libdwarf (Libdwarf Project)

References

• http://www.securityfocus.com/bid/109380
• https://sourceforge.net/p/libdwarf/code/ci/cb7198abde46c2ae29957ad460da6886eaa606ba/tree/libdwarf/dwarf_elf_load_header…
• https://sourceforge.net/p/libdwarf/code/merge-requests/4/