suse · CVE-2018-18521

Quick triage

Priority: low Published: 2021-05-30 14:18:12 UTC Updated: 2026-03-05 06:38:06 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-18521 severity low: SUSE including 704 source package names (0.1.0:libdw1-0.168-4.5.3, 0.1.0:libebl-plugins-0.168-4.5.3, …), 1302 product×package rows across 223 product lines (Container bci/bci-init, Container bci/bci-minimal, … (223 product lines)): Fixed 1145, Known Affected 157.

Description:

Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.

cvelogic Threat Intelligence