Summary
It was discovered that PatchELF was not properly performing bounds
checks, which could lead to an out-of-bounds read via a specially
crafted file. An attacker could possibly use this issue to cause a
denial of service or to expose sensitive information. (CVE-2022-44940)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | patchelf | 0.14.3-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Critical 9.1
Patchelf out-of-bounds read
Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.
References
-
report
https://ubuntu.com/security/CVE-2022-44940