CVE-2019-7148

CVE-2019-7148 describes an excessive memory allocation vulnerability in the elfutils library, specifically within the read_long_names function, affecting elfutils 0.174. This flaw allows remote attackers to trigger a denial-of-service condition through crafted ELF input, leading to an out-of-memory exception. Rated as MEDIUM severity (CVSS 6.5), it requires user interaction (UI:R) but can be exploited over the network (AV:N) with low attack complexity (AC:L), primarily impacting availability (A:H). Despite the potential for denial-of-service, the maintainers consider it a false positive due to ASAN warnings, and there is no evidence of active exploitation, publicly available exploit code, or significant community discussion.