5164 matches found
CVE-2017-7299
The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an invalid read of size 8 because the code to emit relocs bfdelffinallink function in bfd/elflink.c does not check the format of the input file before trying to read the ELF reloc section header. The...
CVE-2017-7299
The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an invalid read of size 8 because the code to emit relocs bfdelffinallink function in bfd/elflink.c does not check the format of the input file before trying to read the ELF reloc section header. The...
CVE-2017-7299
The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an invalid read of size 8 because the code to emit relocs bfdelffinallink function in bfd/elflink.c does not check the format of the input file before trying to read the ELF reloc section header. The...
CVE-2017-7299
CVE-2017-7299 affects GNU Binutils 2.28’s Binary File Descriptor library (libbfd). The vulnerability arises when emitting relocations: bfd_elf_final_link in bfd/elflink.c reads the ELF reloc section header without validating the input file format, leading to an invalid read of size 8 and causing ...
elfutils 'allocate_elf' function denial of service vulnerability
elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. A denial of service vulnerability exists in the 'allocateelf' function in the common.h file of elfutils. A remote attacker could use this vulnerability to build special ELF files to crash an...
elfutils '__libelf_set_rawdata_wrlock' function denial of service vulnerability
elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. A denial of service vulnerability exists in the libelfsetrawdatawrlock function in elfutils's elfgetdata.c. A remote attacker could use this vulnerability to cause a denial of service via a...
CVE-2017-6965
A vulnerability was found in the readelf utility; part of binutils. A crafted ELF executable or shared library could cause readelf to write arbitrary locations on the heap while processing relocations, leading to a crash or potential code execution...
CVE-2016-10255
The libelfsetrawdatawrlock function in elfgetdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a crafted 1 shoff or 2 shsize ELF header value, which triggers a memory allocation failure...
CVE-2016-10254
The allocateelf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a crafted ELF file, which triggers a memory allocation failure...
CVE-2016-10254
The allocateelf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a crafted ELF file, which triggers a memory allocation failure...
CVE-2016-10254
CVE-2016-10254 affects Elfutils. The vulnerability is due to memory allocation failure in allocate_elf (common.h), where crafting an ELF file can crash the program and cause a denial of service. The documents do not provide a remediation/patch details; only indicate Elfutils before 0.168 as affec...
UBUNTU-CVE-2016-10254
The allocateelf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a crafted ELF file, which triggers a memory allocation failure...
CVE-2016-10254
The allocateelf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a crafted ELF file, which triggers a memory allocation failure...
F5 Networks BIG-IP : Linux file utility vulnerabilities (K16347)
CVE-2014-8116 The ELF parser readelf.c in file before 5.21 allows remote attackers to cause a denial of service CPU consumption or crash via a large number of 1 program or 2 section headers or 3 invalid capabilities. CVE-2014-8117 softmagic.c in file before 5.21 does not properly limit recursion,...
UBUNTU-CVE-2016-5027
dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file...
CVE-2016-5027
dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file...
CVE-2016-5027
dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file...
Code injection
dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file...