View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-18520 severity low: SUSE including 704 source package names (0.1.0:libdw1-0.168-4.5.3, 0.1.0:libebl-plugins-0.168-4.5.3, …), 1302 product×package rows across 223 product lines (Container bci/bci-init, Container bci/bci-minimal, … (223 product lines)): Fixed 1145, Known Affected 157.
An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes the outer ar file before handling all inner entries. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file.