{"action":"Upgrade elfutils to 0.168-r1 or later.","affected":[{"fixed":"0.168-r1","introduced":"0"}],"component":"elfutils","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.14","exploited":false,"fixed_versions":["0.168-r1"],"id":"tcs_01M5N9QRNH84EPZ1THAW952B24","modified_at":"2026-06-15T18:18:07.193267730Z","published_at":"2017-04-09T14:59:00.667Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2017-7607","https://security.alpinelinux.org/vuln/CVE-2017-7607"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2017-7607#Alpine:v3.14/elfutils","url":"https://osv.dev/vulnerability/ALPINE-CVE-2017-7607"}],"summary":"The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file."}