CVE-2019-14249

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-24 · updated 2026-06-17
Weakness: CWE-369

Description

dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.

Affected products

Libdwarf Project Libdwarf: before 2019-07-05 — fixed in 2019-07-05

How to fix

Upgrade to a fixed version: Libdwarf Project Libdwarf 2019-07-05. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/109380
https://sourceforge.net/p/libdwarf/code/ci/cb7198abde46c2ae29957ad460da6886eaa606ba/tree/libdwarf/dwarf_elf_load_headers.c?diff=99e77c3894877a1dd80b82808d8309eded4e5599
https://sourceforge.net/p/libdwarf/code/merge-requests/4/
http://www.securityfocus.com/bid/109380
https://sourceforge.net/p/libdwarf/code/ci/cb7198abde46c2ae29957ad460da6886eaa606ba/tree/libdwarf/dwarf_elf_load_headers.c?diff=99e77c3894877a1dd80b82808d8309eded4e5599
https://sourceforge.net/p/libdwarf/code/merge-requests/4/

Get alerted when CVE-2019-14249 or the next vulnerability affects your stack