44 matches found
elfpack
ElfPack: ELFバイナリセクションドッキングによるステージレスペイロード配信 ハイライト ペイロードバンドリングメカニズムの概要:コンパイル、リンク、ロード。 バイナリ互換性と、配信メカニズムに対する疎結合ペイロードの作成。 セクションの自動メモリロードの回避。 構造化セクションタイプの使用。 ELFセクションを介したフィールド内ペイロードの(再)ローダーへのアタッチ。独自のペイロードを持ち込む。 分離されたプリコンパイル済みELFセクションによるシグネチャ回避。 ペイロード生成パイプラインによるローダーへのドライブバイペイロードアタッチメント。...
CVE-2026-62958
Libriscv の脆弱性により、攻撃者は境界外読み取りを使用してサンドボックスをクラッシュさせることができます。 Bad elf を作成するには: python3 poc.py samplefile poisonedfile 結果: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at offset 0x250 Manipulating .symtab section header at offset 0x710 ❯ ./rvlinux poisonedfile fish: Job 1,...
NullSection
NullSection NullSection は、セクションヘッダーをヌルバイトで上書きする手法を適用するアンチリバースツールです。 インストール git clone https://github.com/MatheuZSecurity/NullSection cd NullSection gcc nullsection.c -o nullsection ./nullsection 利点 任意のELF(.ko ルートキットなど)に対して nullsection を実行すると、その後 Ghidra/IDA で ELF...
Linux Distros Unpatched Vulnerability : CVE-2026-91781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the elfx8664commonsectionindex function of the ELF Section Handler component. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediation A fix was...
DEBIAN-CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
AZL-103368 CVE-2026-91781 affecting package binutils 2.41-13
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
UBUNTU-CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781
A null pointer dereference in the ELF Section Handler component of GNU Binutils 2.47 , specifically in the function elf_x86_64_common_section_index within bfd/elf64-x86-64.c, allows a local attacker with low privileges to crash the application, resulting in low availability impact . The exploit i...
CVE-2026-91781 GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781 GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781: NULL Pointer Dereference
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
PT-2026-91902
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf x86 64 common section index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit...
CVE-2026-90829
A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfdelfsetgroupcontents of the file bfd/elf.c of the component SHTGROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Module: Fixed kernel panic when a symbol’s stshndx value is out of bounds The module loader does not check the bounds of the ELF section index in simplifysymbols: c for i = 1; i shsize / sizeofElfSym; i++ const char name =...
UBUNTU-CVE-2026-89556
In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...
CVE-2026-89556 module: validate string table section types
In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...