CVE-2022-4285

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...

OPENSUSE-SU-2023:0031-1 Security update for upx

upx was updated to fix the following issues: - CVE-2023-23457: Fixed a segmentation fault when processing malicious elf files boo1207122 Update to release 4.0.1 Fix crash when a linux/armeb LZMA-packed binary unpacks itself. Resolve 'CantPackException: bad ElfXXShdrs' with staticly-linked program...

Security update for upx (moderate)

openSUSE Security Update: Security update for upx Announcement ID: openSUSE-SU-2023:0031-1 Rating: moderate References: 1207122 Cross-References: CVE-2023-23457 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: upx was updated t...

ELF header parsing library doesn't check for valid offset

The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...

GHSA-G6PW-999W-J75M ELF header parsing library doesn't check for valid offset

The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...

GSD-2023-1000866 x86/kexec: Fix double-free of elf header buffer

x86/kexec: Fix double-free of elf header buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000450 RISC-V: kexec: Fix memory leak of elf header buffer

RISC-V: kexec: Fix memory leak of elf header buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000392 x86/kexec: Fix double-free of elf header buffer

x86/kexec: Fix double-free of elf header buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

New Backdoor Created Using Leaked CIA's Hive Malware Discovered in the Wild

Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency CIA's Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017. "This is the first time we caught a variant of the CIA Hive...

OESA-2023-1001 patchelf security update

PatchELF is a simple utility for modifying an existing ELF executable or library. It can change the dynamic loader "ELF interpreter" of an executable and change the RPATH of an executable or library. Security Fixes: Patchelf v0.9 was discovered to contain an out-of-bounds read via the function...

PT-2025-53223

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of the ELF header buffer during kexec. Specifically, a superfluous vfree call within the crash load segments function's error pa...

PatchELF 缓冲区错误漏洞

PatchELF is a simple utility program for modifying existing ELF executables and libraries in the Nix/Nixpkgs/NixOS open source. A security vulnerability exists in PatchELF version v0.9, which stems from the discovery that Patchelf contains out-of-bounds reads via the function modifyRPath in...

CVE-2022-23523

In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the linux-loader crate entering an infinite loop if...

Code injection

In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the linux-loader crate entering an infinite loop if...

CVE-2022-23523

CVE-2022-23523 affects rust-vmm/linux-loader. In versions before 0.8.1, the loader uses offsets/sizes from ELF headers to locate data. If an ELF header is crafted so these offsets point beyond the file end, Virtual Machine Monitors loading kernels with linux-loader could enter an infinite loop. T...

CVE-2022-23523 rust-vmm linux-loader vulnerable to Out-of-bounds Read

In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the linux-loader crate entering an infinite loop if...

CVE-2022-23523 rust-vmm linux-loader vulnerable to Out-of-bounds Read

In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the linux-loader crate entering an infinite loop if...

linux-loader reading beyond EOF could lead to infinite loop

Impact The linux-loader crate used the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets pointed beyond the end of the file this could lead to an infinite loop. Virtual Machine Monitors using the linux-loader crate could enter an infinite loop i...

GHSA-52H2-M2CF-9JH6 linux-loader reading beyond EOF could lead to infinite loop

Impact The linux-loader crate used the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets pointed beyond the end of the file this could lead to an infinite loop. Virtual Machine Monitors using the linux-loader crate could enter an infinite loop i...

PT-2022-16049 · Unknown · Linux-Loader

Name of the Vulnerable Software and Affected Versions: linux-loader versions prior to 0.8.1 Description: The issue arises when the linux-loader crate uses offsets and sizes from ELF headers to determine read offsets. If these offsets point beyond the file's end, it could lead to an infinite loop ...