CVE-2014-9447
Fixed in a distro release EPSS 5%
Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.
Products: elfutils_project elfutils
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | elfutils | 0.159-4.1 |
| Debian 13 | elfutils | 0.159-4.1 |
| Debian 14 | elfutils | 0.159-4.1 |
| Red Hat Enterprise Linux 6 | elfutils | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 6 | elfutils-debuginfo | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 6 | elfutils-devel | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 6 | elfutils-devel-static | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 6 | elfutils-libelf | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 6 | elfutils-libelf-devel | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 6 | elfutils-libelf-devel-static | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 6 | elfutils-libs | 0:0.161-3.el6 |
| Red Hat Enterprise Linux 7 | elfutils | 0:0.163-3.el7 |
| Red Hat Enterprise Linux 7 | elfutils-debuginfo | 0:0.163-3.el7 |
| Red Hat Enterprise Linux 7 | elfutils-devel | 0:0.163-3.el7 |
| Red Hat Enterprise Linux 7 | elfutils-devel-static | 0:0.163-3.el7 |
| Red Hat Enterprise Linux 7 | elfutils-libelf | 0:0.163-3.el7 |
| Red Hat Enterprise Linux 7 | elfutils-libelf-devel | 0:0.163-3.el7 |
| Red Hat Enterprise Linux 7 | elfutils-libelf-devel-static | 0:0.163-3.el7 |
| Red Hat Enterprise Linux 7 | elfutils-libs | 0:0.163-3.el7 |
| SUSE Linux Enterprise Desktop 12 | elfutils | 0.158-6.1 |
| SUSE Linux Enterprise Server 12 | elfutils | 0.158-6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | elfutils | 0.158-6.1 |
| SUSE Linux Enterprise Software Development Kit 12 | elfutils | 0.158-6.1 |
| Ubuntu 14.04 LTS | elfutils | 0.158-0ubuntu5.2 |
| openSUSE Tumbleweed | elfutils | 0.167-1.5 |