suse · CVE-2018-18310

Quick triage

Priority: low Published: 2021-05-30 14:17:49 UTC Updated: 2026-03-05 06:38:55 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-18310 severity low: SUSE including 719 source package names (0.1.0:libdw1-0.168-4.5.3, 0.1.0:libebl-plugins-0.168-4.5.3, …), 1317 product×package rows across 224 product lines (Container bci/bci-init, Container bci/bci-minimal, … (224 product lines)): Fixed 1160, Known Affected 157.

Description:

An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by consider_notes.

cvelogic Threat Intelligence