CVE-2018-18521

Name of the Vulnerable Software and Affected Versions elfutils version 0.174

Description The issue is related to a divide-by-zero vulnerability in the arlib add symbols() function in arlib.c in elfutils. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in an application crash, by using a crafted ELF file. The vulnerability is caused by the mishandling of a zero sh entsize.

Recommendations For elfutils version 0.174, consider updating to a newer version that addresses this issue, as the current version is affected by the divide-by-zero vulnerability in the arlib add symbols() function.