elfutils project elfutils 0.168 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote malicious users to cause a denial of service (memory consumption) via a crafted ELF file.

Elfutils Project Elfutils 0.168

4.3

CVSSv2

The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

Elfutils Project Elfutils 0.168

4.3

CVSSv2

The check_group function in elflint.c in elfutils 0.168 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

Elfutils Project Elfutils 0.168 Debian Debian Linux 8.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04

4.3

CVSSv2

The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

Elfutils Project Elfutils 0.168 Debian Debian Linux 8.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04

4.3

CVSSv2

The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

Elfutils Project Elfutils 0.168 Debian Debian Linux 8.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

4.3

CVSSv2

The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

Elfutils Project Elfutils 0.168 Debian Debian Linux 8.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

4.3

CVSSv2

elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote malicious users to cause a denial of service (memory consumption) via a crafted ELF file.

Elfutils Project Elfutils 0.168 Debian Debian Linux 8.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

4.3

CVSSv2

The allocate_elf function in common.h in elfutils prior to 0.168 allows remote malicious users to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.

Elfutils Project Elfutils

4.3

CVSSv2

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils prior to 0.168 allows remote malicious users to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Elfutils Project Elfutils

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook