Gentoo Linux Security Advisory 201612-32 - A heap-based buffer overflow vulnerability in elfutils might allow remote attackers to execute arbitrary code. Versions less than 0.159 are affected.
74ac6a8c0c7982b48592b7489a352e967ce7abc218dc8dcc62e6bf6a6613d599Mandriva Linux Security Advisory 2015-104 - The libdw library provides support for accessing DWARF debugging information inside ELF files. An integer overflow flaw in check_section(), leading to a heap-based buffer overflow, was found in the libdw library. A malicious ELF file could cause an application using libdw to crash or, potentially, execute arbitrary code with the privileges of the user running the application. Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils allows remote attackers to write to arbitrary files to the root directory via a / in a crafted archive, as demonstrated using the ar program.
2dc0f5478ae8a0416760b54f46eda2b4b9a524956ed6d38ef3797a37480e1da1Ubuntu Security Notice 2188-1 - Florian Weimer discovered that the elfutils libdw library incorrectly handled malformed compressed debug sections in ELF files. If a user or automated system were tricked into processing a specially crafted ELF file, applications linked against libdw could be made to crash, or possibly execute arbitrary code.
88476ccac5dcf2b200ecd86b4926a1c73203a400f99cbc0219564da06f9199d9
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed