elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

A heap-based buffer over-read was discovered in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm...

elfutils read_srclines Buffer Overflow DoS

The vulnerability of the readsrclines function in dwarfgetsrclines.c in elfutils is related to reading buffers outside of their intended scope. Exploiting this vulnerability could allow an attacker to cause a service failure by invoking a specially crafted ELF file...