elfutils:fuzz-libdwfl: Use-of-uninitialized-value in check_section

Detailed Report: https://oss-fuzz.com/testcase?key=6538272475316224 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: checksection dwarfbeginelf loaddw...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in check_section

Detailed Report: https://oss-fuzz.com/testcase?key=6724057145147392 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: checksection dwarfbeginelf loaddw...

elfutils: integer overflow, leading to a heap-based buffer overflow in libdw

Integer overflow in the checksection function in dwarfbeginelf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed compressed debug section in an ELF...