27 matches found
NullSection
NullSection NullSection は、セクションヘッダーをヌルバイトで上書きする手法を適用するアンチリバースツールです。 インストール root@kitploit: git clone https://github.com/MatheuZSecurity/NullSection cd NullSection gcc nullsection.c -o nullsection ./nullsection 利点 任意のELF（.ko ルートキットなど）に対して nullsection を実行すると、その後 Ghidra/IDA で ELF...
CVE-2026-90829
A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfdelfsetgroupcontents of the file bfd/elf.c of the component SHTGROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been...
elfpack
ElfPack: ELFバイナリセクションドッキングによるステージレスペイロード配信 ハイライト ペイロードバンドリングメカニズムの概要：コンパイル、リンク、ロード。 バイナリ互換性と、配信メカニズムに対する疎結合ペイロードの作成。 セクションの自動メモリロードの回避。 構造化セクションタイプの使用。 ELFセクションを介したフィールド内ペイロードの（再）ローダーへのアタッチ。独自のペイロードを持ち込む。 分離されたプリコンパイル済みELFセクションによるシグネチャ回避。 ペイロード生成パイプラインによるローダーへのドライブバイペイロードアタッチメント。...
CVE-2026-62958
Libriscv の脆弱性により、攻撃者は境界外読み取りを使用してサンドボックスをクラッシュさせることができます。 Bad elf を作成するには: root@kitploit: python3 poc.py samplefile poisonedfile 結果: root@kitploit: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at offset 0x250 Manipulating .symtab section header at offset 0x710 ❯ ./rvlinux...
CVE-2026-89556 module: validate string table section types
In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...
gdb: Fix of CVE-2019-1010180
CVE-2019-1010180: add warning for corrupt ELF section size larger than file...
CLSA-2026-1777308938 gdb: Fix of CVE-2019-1010180
CVE-2019-1010180: add warning for corrupt ELF section size larger than file...
CLSA-2026-1776693427 Fix CVE(s): CVE-2019-1010180
SECURITY UPDATE: buffer overflow when ELF section size is invalid - debian/patches/CVE-2019-1010180.patch: reject ELF sections whose recorded size exceeds the file size - CVE-2019-1010180...
CLSA-2025-1766586503 binutils: Fix of CVE-2025-11083
CVE-2025-11083: fix corrupt ELF section header handling...
EUVD-2021-26966
Malware in sbrugna...
EUVD-2016-9238
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-12972
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in...
UBUNTU-CVE-2025-8224
A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfdelfgetstrsection of the file bfd/elf.c of the component BFD Library. The manipulation leads to null pointer dereference. Local access is required to approach this attack...
NVIDIA cuobjdump ELF Section Parsing Integer Overflow Vulnerability
Talos Vulnerability Report TALOS-2025-2151 NVIDIA cuobjdump ELF Section Parsing Integer Overflow Vulnerability June 2, 2025 CVE Number CVE-2025-23247 SUMMARY An integer overflow vulnerability exists in the ELF Section Parsing functionality of NVIDIA cuobjdump 12.8.55. A specially crafted fatbin...
CVE-2021-3674
A flaw was found in rizin. The createsectionfromphdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function...
CVE-2021-3674
A flaw was found in rizin. The createsectionfromphdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function...
binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c
An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...
DEBIAN-CVE-2020-24826
A vulnerability in the elf::section::asstrtab function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...
