Skip to content
OpenAdvisories

Package · Debian

elfutils

32 known vulnerabilities.

32 results · Feed

  • Low 3.3

    GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service

    A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be app…

  • Low 2.5

    GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

    A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch …

  • Medium 5.3

    GNU elfutils eu-readelf readelf.c print_string_section buffer overflow

    A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x le…

  • Low 3.3

    GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference

    A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking loc…

  • Medium 5.3

    GNU elfutils eu-readelf readelf.c process_symtab buffer overflow

    A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_symtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local access is requ…

  • Medium 5.0

    GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

    A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruptio…

  • Medium 4.0

    elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

  • Unscored —

    The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service v…

  • Unscored —

    In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cau…

  • Unscored —

    In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect …

  • Unscored —

    In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in l…

  • Unscored —

    In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attack…

  • Unscored —

    An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elf…

  • Unscored —

    An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf3…

  • Unscored —

    A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils …

  • Unscored —

    Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers …

  • Unscored —

    An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-…

  • Unscored —

    An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.…

  • Unscored —

    libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application cr…

  • Unscored —

    libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and d…

  • Unscored —

    dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial…

  • Unscored —

    The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-…

  • Unscored —

    The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-…

  • Unscored —

    elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote at…

  • Unscored —

    The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a den…

  • Unscored —

    The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (he…

  • Unscored —

    elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause …

  • Unscored —

    The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-base…

  • Unscored —

    The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a d…

  • Unscored —

    The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (cr…

  • Unscored —

    Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 all…

  • Unscored —

    Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and…