22 matches found
telfhash
Trend Micro ELF Hash telfhash telfhash is symbol hash for ELF files, just like imphash is imports hash for PE files. With telfhash, you can cluster ELF files by similarity based on symbols. This is particularly useful for clustering malicious samples. If a sample has no symbols, telfhash uses its...
libdwarf:fuzz_showsectgrp: Heap-double-free in _dwarf_load_elf_symtab_symbols
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5634424300699648 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzshowsectgrp Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-double-free Crash Address:...
CVE-2026-31521 module: Fix kernel panic when a symbol st_shndx is out of bounds
In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol stshndx is out of bounds The module loader doesn't check for bounds of the ELF section index in simplifysymbols: for i = 1; i shsize / sizeofElfSym; i++ const char name = info-strtab +...
PT-2026-34426
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The module loader fails to verify the bounds of the ELF section index within the simplify symbols function. A symbol containing an out-of-bounds st shndx value, such as those defined as...
EUVD-2016-10194
Malware in sbrugna...
peda
This repository is an offensive tool for exploit development. It is a Python Exploit Development Assistance for GDB PED A, which is a script that helps speed up the exploit development process on Linux/Unix. The tool is designed to work with GDB 7.x and Python 2.6+. The tool has various features,...
binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...
OESA-2023-1592 binutils security update
The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols...
OESA-2023-1593 binutils security update
The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols...
orbit:ElfFileLoadSymbolsFuzzer: Heap-buffer-overflow in orbit_object_utils::ElfFileImpl<llvm::object::ELFType<
Detailed Report: https://oss-fuzz.com/testcase?key=4583810308374528 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6120000073c1 Crash State:...
orbit:ElfFileLoadSymbolsFuzzer: Heap-buffer-overflow in checkLinkerOptCommand
Detailed Report: https://oss-fuzz.com/testcase?key=6363674672758784 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000031bc Crash State: checkLinkerOptComma...
AZL-13114 CVE-2022-4285 affecting package binutils for versions less than 2.37-5
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...
ALPINE-CVE-2016-9384
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...
UBUNTU-CVE-2016-9384
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...
CVE-2016-9384
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...
CVE-2016-9384
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...
CVE-2016-9384
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...
CVE-2016-9384
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...
CVE-2016-9384: Exposure of Sensitive Information to an Unauthorized Actor
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...
Security update for xen (important)
xen was updated to version 4.7.1 to fix 17 security issues. These security issues were fixed: - CVE-2016-9637: ioport array overflow allowing a malicious guest administrator can escalate their privilege to that of the host bsc1011652. - CVE-2016-9386: x86 null segments were not always treated as...