CVE catalog

CVE-2018-18310

elfutils: CVE-2018-18310

Severity: Low · CVSS 3.3CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Published: Oct 10, 2018, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.35% · Oct 27, 2026

An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by consider_notes.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	elfutils	sid	`0.196-1`	fixed
Debian	elfutils	forky	`0.196-1`	fixed
Debian	elfutils	trixie	`0.192-4`	fixed
Debian	elfutils	bookworm	`0.188-2.1`	fixed
Ubuntu	elfutils	pro	`0.157-1ubuntu1`	vulnerable
Ubuntu	elfutils	pro	`0.158-0ubuntu3`	vulnerable
Ubuntu	elfutils	pro	`0.158-0ubuntu4`	vulnerable
Ubuntu	elfutils	pro	`0.158-0ubuntu5`	vulnerable
Ubuntu	elfutils	pro	`0.158-0ubuntu5.1`	vulnerable
Ubuntu	elfutils	pro	`0.158-0ubuntu5.2`	vulnerable
Ubuntu	elfutils	pro	`0.158-0ubuntu5.3`	vulnerable
Ubuntu	elfutils	pro	`0.158-0ubuntu5.3+esm1`	fixed
Ubuntu	elfutils	16.04	`0.163-4ubuntu1`	vulnerable
Ubuntu	elfutils	16.04	`0.163-5.1`	vulnerable
Ubuntu	elfutils	16.04	`0.164-1`	vulnerable
Ubuntu	elfutils	16.04	`0.165-3`	vulnerable
Ubuntu	elfutils	16.04	`0.165-3ubuntu1`	vulnerable
Ubuntu	elfutils	16.04	`0.165-3ubuntu1.1`	vulnerable
Ubuntu	elfutils	16.04	`0.165-3ubuntu1.2`	fixed
Ubuntu	elfutils	18.04	`0.170-0.1`	vulnerable
Ubuntu	elfutils	18.04	`0.170-0.2`	vulnerable
Ubuntu	elfutils	18.04	`0.170-0.3`	vulnerable
Ubuntu	elfutils	18.04	`0.170-0.4`	vulnerable
Ubuntu	elfutils	18.04	`0.170-0.4ubuntu0.1`	fixed
Opensuse	elfutils	tumbleweed	`0.185-3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	elfutils	source	sid	`0.175-1`	not yet assigned	Not reported	[911083]
Debian	elfutils	source	forky	`0.175-1`	not yet assigned	Not reported	[911083]
Debian	elfutils	source	trixie	`0.175-1`	not yet assigned	Not reported	[911083]
Debian	elfutils	source	bookworm	`0.175-1`	not yet assigned	Not reported	[911083]
Ubuntu	elfutils	deb	pro	`0.158-0ubuntu5.3+esm1`	Not reported	UBUNTU-CVE-2018-18310	Not reported
Ubuntu	elfutils	deb	16.04	`0.165-3ubuntu1.2`	Not reported	UBUNTU-CVE-2018-18310	Not reported
Ubuntu	elfutils	deb	18.04	`0.170-0.4ubuntu0.1`	Not reported	UBUNTU-CVE-2018-18310	Not reported
Opensuse	elfutils	rpm	tumbleweed	`0.185-3.1`	Not reported	OPENSUSE-SU-2024:10733-1	Not reported

[Debian bug #911083]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[debuginfod-dummy-client]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[elfutils-lang]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · noarch · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libasm1]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libasm1-32bit]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libasm-devel]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libdebuginfod1-dummy]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libdebuginfod-dummy-devel]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libdw1]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libdw1-32bit]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libdw-devel]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libelf1]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libelf1-32bit]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libelf-devel]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed
[libelf-devel-32bit]Unknown
Source package: [elfutils]
Details (1)
- 0.194-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 0.185-3.1
  Version impact unknown
  dsa · elfutils · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[debuginfod]Fixed
Source package: [elfutils]
Details (4)
- 0.188-2.1 · amd64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.188-2.1 · arm64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
[elfutils]Fixed
Details (4)
- 0.188-2.1 · amd64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.188-2.1 · arm64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
[libasm1]Fixed
Source package: [elfutils]
Details (4)
- 0.188-2.1 · amd64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.188-2.1 · arm64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
[libasm-dev]Fixed
Source package: [elfutils]
Details (4)
- 0.188-2.1 · amd64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.188-2.1 · arm64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
[libdebuginfod1]Fixed
Source package: [elfutils]
Details (4)
- 0.188-2.1 · amd64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.188-2.1 · arm64 · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
[libdebuginfod-common]Fixed
Source package: [elfutils]
Details (4)
- 0.188-2.1 · all · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.188-2.1 · all · bookworm
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12
- 0.192-4~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 0.175-1
  dsa · elfutils · debian · bookworm; dsa · elfutils · debian · 12

Next results

Observed: Oct 23, 2026, 5:35:28 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]