673 matches found
EulerOS 2.0 SP5 : gdb (EulerOS-SA-2019-1965)
According to the version of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNU Debugger GDB 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can...
The vulnerability in the dwarf_elf_load_headers.c component of the library for providing access to debugging information in DWARF libdwarf, which allows a malicious actor to cause a service failure.
The vulnerability of the dwarfelfloadheaders.c component in the library that provides access to debugging information in DWARF libdwarf is related to zero-division errors. Exploiting this vulnerability could allow a malicious actor to cause service failures using an ELF file...
elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarfgetabbrev in dwarfgetabbrev.c and dwarfhasattr in dwarfhasattr.c, leading to a heap-based buffer over-read and an application crash...
llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::ELFObjectFile<llvm::object::ELFType<
Detailed report: https://oss-fuzz.com/testcase?key=5687643842543616 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6220000018fc Crash State:...
UBUNTU-CVE-2019-14249
dwarfelfloadheaders.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service division by zero via an ELF file with a zero-size section group SHTGROUP, as demonstrated by dwarfdump...
Denial Of Service (DoS)
Binary File Descriptor BFD library distributed in GNU Binutils is vulnerable to denial of serviceDoS attacks. An attacker could cause a crash by providing an ELF file with corrupted DWARF debug information...
EulerOS Virtualization for ARM 64 3.0.1.0 : binutils (EulerOS-SA-2019-1377)
According to the versions of the binutils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - concatfilename in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30,...
The vulnerability of the read_srclines function in the elfutils package, related to reading buffers from outside the system, allows a hacker to cause a service failure.
The vulnerability of the readsrclines function in dwarfgetsrclines.c in elfutils is related to reading buffers outside of their intended scope. Exploiting this vulnerability could allow an attacker to cause a service failure by invoking a specially crafted ELF file...
EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-1019)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library CVE-2018-7568 - binutils: integer underflow...
The vulnerability of the `parse_die` function in the GNU Binutils development environment allows a perpetrator to trigger a service failure.
The vulnerability of the parsedie function in the GNU Binutils development toolset is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by using an ELF file with a corrupted DWARF FORM block...
PT-2019-1675 · Red Hat +5 · Elfutils +6
Name of the Vulnerable Software and Affected Versions: elfutils version 0.175 Description: A heap-based buffer over-read was discovered in the read srclines function in dwarf getsrclines.c in libdw in elfutils. This issue can be exploited by a crafted input, causing segmentation faults and leadin...
EulerOS 2.0 SP2 : binutils (EulerOS-SA-2018-1426)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library CVE-2018-7568 - binutils: integer underflow...
llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::ELFObjectFile<llvm::object::ELFType<
Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5650578005295104 Project: llvm Fuzzer: libFuzzerllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ...
binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library
An integer wraparound has been discovered in the Binary File Descriptor BFD library distributed in GNU Binutils up to version 2.30. An attacker could cause a crash by providing an ELF file with corrupted DWARF debug information...
binutils: Heap-base buffer over-read in dwarf.c:process_cu_tu_index() allows for denial of service via crafted file
processcutuindex in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted binary file, as demonstrated by readelf...
binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library
An integer wraparound has been discovered in the Binary File Descriptor BFD library distributed in GNU Binutils up to version 2.30. An attacker could cause a crash by providing an ELF file with corrupted DWARF debug information...
Elfutils Buffer Overflow Vulnerability
elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. A security vulnerability exists in elfutils version 0.173 in the 'dwarfgetabbrev' function of the dwarfgetabbrev.c file and the 'dwarfhasattr ' functions have a security vulnerability that stems...
DEBIAN-CVE-2018-16403
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarfgetabbrev in dwarfgetabbrev.c and dwarfhasattr in dwarfhasattr.c, leading to a heap-based buffer over-read and an application crash...
ALPINE-CVE-2018-16403
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarfgetabbrev in dwarfgetabbrev.c and dwarfhasattr in dwarfhasattr.c, leading to a heap-based buffer over-read and an application crash...
CVE-2018-16403
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarfgetabbrev in dwarfgetabbrev.c and dwarfhasattr in dwarfhasattr.c, leading to a heap-based buffer over-read and an application crash...