ROOT-OS-DEBIAN-12-CVE-2025-1365 CVE-2025-1365 in rootio-elfutils - Patched by Root

Root has patched CVE-2025-1365 in the rootio-elfutils package for Root:Debian:12. Multiple fixed versions available...

CVE-2024-25260

A NULL pointer dereference vulnerability in the elfutils library has been discovered. This vulnerability occurs within the handleverdef function in the readelf.c source file. A NULL pointer dereference typically happens when a program attempts to access memory using a pointer that is not pointing...

DEBIAN-CVE-2019-7149

A heap-based buffer over-read was discovered in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm...

elfutils 'read_long_names' function denial of service vulnerability

elfutils is a collection of utilities and libraries for reading, creating, and modifying ELF binaries. libelf is one of these libraries for parsing and interacting with ELF-formatted binaries. A security vulnerability exists in the 'readlongnames' function in the elfbegin.c file of libelf in...

elfutils 'read_srclines' function heap buffer out-of-bounds read vulnerability

elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. libdw is one of the ELF manipulation libraries. A heap buffer out-of-bounds read vulnerability exists in the 'readsrclines' function of the dwarfgetsrclines.c file of libdw in elfutils version...

UBUNTU-CVE-2018-18310

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

UBUNTU-CVE-2018-16402

libelf/elfend.c in elfutils 0.173 allows remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact because it tries to decompress twice...

UBUNTU-CVE-2017-7608

The eblobjectnotetypename function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...