CVE-2020-24825: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in the linetable::linetable function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

PT-2021-6548

Name of the Vulnerable Software and Affected Versions Libelfin version 0.3 Description The issue is related to the dwarf::cursor::skip form function in Libelfin, which can be exploited by attackers to cause a denial of service DOS through a segmentation fault. This can be achieved by using a...

PT-2021-6727

Name of the Vulnerable Software and Affected Versions Libelfin version 0.3 Description The issue is related to insufficient neutralization of special elements in a request, specifically in the dwarf::to string function of the Libelfin library. This allows a remote attacker to cause a denial of...

PT-2021-6522

Name of the Vulnerable Software and Affected Versions Libelfin version 0.3 Description A vulnerability in the dwarf::cursor::skip form function allows attackers to cause a denial of service through a segmentation fault via a crafted ELF file. The issue is related to errors in resource release...

CVE-2020-24823: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in the dwarf::tostring function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

Libelfin injection vulnerability

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::tostring function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a...

CVE-2020-24821: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

CVE-2020-24826: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in the elf::section::asstrtab function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

PT-2021-6508

Name of the Vulnerable Software and Affected Versions Libelfin version 0.3 Description The issue is related to insufficient neutralization of special elements in a request, specifically in the elf::section::as strtab function of the Libelfin library for reading ELF and DWARFv4 files. This allows ...

CVE-2020-24827: Undefined Security Weakness

A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

Libelfin security vulnerabilities

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. A buffer overflow vulnerability exists in the dwarf::linetable::linetable function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service...

Libelfin injection vulnerability

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. linetable::linetable function of Libelfin 0.3 is vulnerable to a denial of service. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a segmentation...

Libelfin injection vulnerability

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::cursor::uleb function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service by causing a segmentation error via a speciall...

CVE-2020-24822: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

PT-2021-6728

Name of the Vulnerable Software and Affected Versions Libelfin version 0.3 Description A vulnerability in the dwarf::cursor::uleb function allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file. The issue is related to insufficient neutralization of...

Doldrums - A Flutter/Dart Reverse Engineering Tool

To flutter: to move in quick, irregular motions, to beat rapidly, to be agitated. Doldrums: a period of stagnation. Doldrums is a reverse engineering tool for Flutter apps targetting Android. Concretely, it is a parser and information extractor for the Flutter/Dart Android binary, conventionally...

Linux Variant of HelloKitty Ransomware Targets VMware ESXi Servers

For the first time, researchers have publicly spotted a Linux encryptor used by the HelloKitty ransomware gang: the outfit behind the February attack on videogame developer CD Projekt Red. On Wednesday, MalwareHunterTeam disclosed its discovery of numerous Linux ELF-64 versions of the HelloKitty...

Huawei EulerOS: Security Advisory for file (EulerOS-SA-2021-2116)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2021-1839

Software: gdb 7.6.1 OS: Cobalt 7.9 CVE-ID: CVE-2019-1010180 CVE-Crit: HIGH CVE-DESC: GNU gdb All versions are affected by: Buffer overflow - accessing a limited amount of memory. Consequences are: denial of service, memory disclosure, and possible code execution. Component: The gdb core module...

EulerOS Virtualization for ARM 64 3.0.2.0 : file (EulerOS-SA-2021-2116)

According to the version of the file packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in the way the File Information fileinfo extension parsed Executable and Linkable Format ELF files. A remo...