suse · CVE-2017-7609

Quick triage

Priority: low Published: 2021-05-30 13:55:00 UTC Updated: 2026-04-18 09:07:45 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-7609 severity low: SUSE including 622 source package names (0.1.0:libdw1-0.168-4.5.3, 0.1.0:libebl-plugins-0.168-4.5.3, …), 1054 product×package rows across 184 product lines (Container bci/bci-init, Container bci/bci-minimal, … (184 product lines)): Fixed 816, Known Affected 157, Known Not Affected 81.

Description:

elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.

cvelogic Threat Intelligence