Oval Definition:	oval:org.opensuse.security:def:20197146
Revision Date: 2023-06-22 Version: 1 Title: CVE-2019-7146 Description: In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2019-7146 SUSE CVE-2019-7146 SUSE-CU-2022:1714-1 SUSE-CU-2022:1715-1 SUSE-CU-2022:1716-1 SUSE-CU-2022:1717-1 SUSE-CU-2022:1736-1 SUSE-CU-2022:1737-1 SUSE-SU-2022:2614-1 SUSE-CU-2022:1852-1 SUSE-IU-2022:1047-1 SUSE-IU-2022:1048-1 SUSE-IU-2022:1049-1 SUSE-SU-2022:2614-2 SUSE-CU-2022:2082-1 SUSE-CU-2022:2083-1 SUSE-CU-2022:2084-1 SUSE-CU-2022:2086-1 SUSE-CU-2022:2087-1 SUSE-CU-2022:2088-1 SUSE-CU-2022:2089-1 SUSE-CU-2022:2090-1 SUSE-CU-2022:2091-1 SUSE-CU-2022:2092-1 SUSE-CU-2022:2093-1 SUSE-CU-2022:2094-1 SUSE-CU-2022:2095-1 SUSE-CU-2022:3263-1 SUSE-CU-2022:3264-1 SUSE-CU-2022:3265-1 SUSE-CU-2023:1261-1 SUSE-CU-2023:1262-1 Platform(s): openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Tumbleweed SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 Product(s): Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed AND elfutils is not affected Definition Synopsis openSUSE Tumbleweed is installed AND Package Information elfutils-0.185-3.1 is installed OR elfutils-lang-0.185-3.1 is installed OR libasm-devel-0.185-3.1 is installed OR libasm1-0.185-3.1 is installed OR libasm1-32bit-0.185-3.1 is installed OR libdw-devel-0.185-3.1 is installed OR libdw1-0.185-3.1 is installed OR libdw1-32bit-0.185-3.1 is installed OR libelf-devel-0.185-3.1 is installed OR libelf-devel-32bit-0.185-3.1 is installed OR libelf1-0.185-3.1 is installed OR libelf1-32bit-0.185-3.1 is installed Definition Synopsis openSUSE Leap Micro 5.2 is installed AND Package Information dwarves-1.22-150300.7.3.1 is installed AND dwarves is signed with openSUSE key OR elfutils-0.177-150300.11.3.1 is installed AND elfutils is signed with openSUSE key OR libasm1-0.177-150300.11.3.1 is installed AND libasm1 is signed with openSUSE key OR libdw1-0.177-150300.11.3.1 is installed AND libdw1 is signed with openSUSE key OR libdwarves-devel-1.22-150300.7.3.1 is installed AND libdwarves-devel is signed with openSUSE key OR libdwarves1-1.22-150300.7.3.1 is installed AND libdwarves1 is signed with openSUSE key OR libebl-plugins-0.177-150300.11.3.1 is installed AND libebl-plugins is signed with openSUSE key OR libelf1-0.177-150300.11.3.1 is installed AND libelf1 is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP3 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND elfutils is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND elfutils is not affected OR libasm1 is not affected OR libasm1-32bit is not affected OR libdw1 is not affected OR libdw1-32bit is not affected OR libebl1 is not affected OR libebl1-32bit is not affected OR libelf-devel is not affected OR libelf1 is not affected OR libelf1-32bit is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 is installed OR SUSE Linux Enterprise High Performance Computing 15 is installed OR SUSE Linux Enterprise Module for Basesystem 15 is installed OR SUSE Linux Enterprise Server 15 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 is installed AND elfutils is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND elfutils is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND elfutils is not affected OR libasm1 is not affected OR libasm1-32bit is not affected OR libdw1 is not affected OR libdw1-32bit is not affected OR libebl1 is not affected OR libebl1-32bit is not affected OR libelf-devel is not affected OR libelf1 is not affected OR libelf1-32bit is not affected Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND elfutils is not affected Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND elfutils is not affected Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information elfutils-0.185-150400.3.35 is installed AND elfutils is signed with openSUSE key OR elfutils-lang-0.185-150400.3.35 is installed AND elfutils-lang is signed with openSUSE key OR libasm1-0.185-150400.3.35 is installed AND libasm1 is signed with openSUSE key OR libdw1-0.185-150400.3.35 is installed AND libdw1 is signed with openSUSE key OR libdw1-32bit-0.185-150400.3.35 is installed AND libdw1-32bit is signed with openSUSE key OR libelf1-0.185-150400.3.35 is installed AND libelf1 is signed with openSUSE key OR libelf1-32bit-0.185-150400.3.35 is installed AND libelf1-32bit is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND Package Information elfutils-0.185-150400.3.35 is installed OR elfutils-lang-0.185-150400.3.35 is installed OR libasm-devel-0.185-150400.3.35 is installed OR libasm1-0.185-150400.3.35 is installed OR libdw-devel-0.185-150400.3.35 is installed OR libdw1-0.185-150400.3.35 is installed OR libdw1-32bit-0.185-150400.3.35 is installed OR libelf-devel-0.185-150400.3.35 is installed OR libelf1-0.185-150400.3.35 is installed OR libelf1-32bit-0.185-150400.3.35 is installed Definition Synopsis SUSE Linux Enterprise Micro 5.1 is installed AND Package Information dwarves-1.22-150300.7.3.1 is installed OR elfutils-0.177-150300.11.3.1 is installed OR libasm1-0.177-150300.11.3.1 is installed OR libdw1-0.177-150300.11.3.1 is installed OR libdwarves-devel-1.22-150300.7.3.1 is installed OR libdwarves1-1.22-150300.7.3.1 is installed OR libebl-plugins-0.177-150300.11.3.1 is installed OR libelf1-0.177-150300.11.3.1 is installed Definition Synopsis SUSE Linux Enterprise Micro 5.2 is installed AND Package Information dwarves-1.22-150300.7.3.1 is installed OR elfutils-0.177-150300.11.3.1 is installed OR libasm1-0.177-150300.11.3.1 is installed OR libdw1-0.177-150300.11.3.1 is installed OR libdwarves-devel-1.22-150300.7.3.1 is installed OR libdwarves1-1.22-150300.7.3.1 is installed OR libebl-plugins-0.177-150300.11.3.1 is installed OR libelf1-0.177-150300.11.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND elfutils is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND elfutils is not affected OR libasm1 is not affected OR libasm1-32bit is not affected OR libdw1 is not affected OR libdw1-32bit is not affected OR libebl1 is not affected OR libebl1-32bit is not affected OR libelf-devel is not affected OR libelf1 is not affected OR libelf1-32bit is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND libebl-plugins-0.177-150300.11.6.1 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND elfutils-0.185-150400.5.3.1 is installed OR elfutils-lang-0.185-150400.5.3.1 is installed OR libasm-devel-0.185-150400.5.3.1 is installed OR libasm1-0.185-150400.5.3.1 is installed OR libdw-devel-0.185-150400.5.3.1 is installed OR libdw1-0.185-150400.5.3.1 is installed OR libdw1-32bit-0.185-150400.5.3.1 is installed OR libelf-devel-0.185-150400.5.3.1 is installed OR libelf1-0.185-150400.5.3.1 is installed OR libelf1-32bit-0.185-150400.5.3.1 is installed
BACK