CVE-2014-9447

ELF utilities (elfutils) vulnerable in versions 0.152 and 0.161 due to a directory traversal in libelf/elf_begin.cread_long_names that lets remote attackers write to arbitrary files in the root directory via a crafted archive (ar). Impact is ability to modify files on the root; remediation is upd...

CVE-2014-9447

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...

UBUNTU-CVE-2014-9447

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...

elfutils '/libelf/elf_begin.c' directory traversal vulnerability

Elfutils contains a series of tools for creating, modifying, and analyzing binary files. The elfutils '/libelf/elfbegin.c' suffers from a directory traversal vulnerability because it fails to adequately filter user-supplied input. A remote attacker could use a specially crafted request with a...

Amazon Linux AMI : elfutils (ALAS-2014-345)

Integer overflow in the checksection function in dwarfbeginelf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed compressed debug section in an ELF...

openSUSE Security Update : elfutils (openSUSE-SU-2014:0974-1)

Fix integer overflow in checksection CVE-2014-0172, bnc872785 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-491. The text description of this plugin is C SUSE LLC...

Medium: elfutils

Issue Overview: Integer overflow in the checksection function in dwarfbeginelf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed compressed debug...

Fedora Update for elfutils FEDORA-2014-5031

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for elfutils FEDORA-2014-5031

Check for the Version of elfutils OpenVAS Vulnerability Test Fedora Update for elfutils FEDORA-2014-5031 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for elfutils USN-2188-1

Check for the Version of elfutils OpenVAS Vulnerability Test $Id: gbubuntuUSN21881.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for elfutils USN-2188-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu: Security Advisory (USN-2188-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

elfutils libdw memory corruption

Memory corruption on ELF parsing...

[USN-2188-1] elfutils vulnerability

========================================================================== Ubuntu Security Notice USN-2188-1 April 30, 2014 elfutils vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 14.04 LTS : elfutils vulnerability (USN-2188-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2188-1 advisory. Florian Weimer discovered that the elfutils libdw library incorrectly handled malformed compressed debug sections in ELF files. If a user or automated system were...

USN-2188-1 elfutils vulnerability

Florian Weimer discovered that the elfutils libdw library incorrectly handled malformed compressed debug sections in ELF files. If a user or automated system were tricked into processing a specially crafted ELF file, applications linked against libdw could be made to crash, or possibly execute...

USN-2188-1: elfutils vulnerability

Florian Weimer discovered that the elfutils libdw library incorrectly handled malformed compressed debug sections in ELF files. If a user or automated system were tricked into processing a specially crafted ELF file, applications linked against libdw could be made to crash, or possibly execute...

[SECURITY] Fedora 19 Update: elfutils-0.158-3.fc19

Elfutils is a collection of utilities, including ld a linker, nm for listing symbols from object files, size for listing the section sizes of an object or archive file, strip for discarding symbols, readelf to see the raw ELF file structures, and elflint to check for well-formed ELF files...

Fedora 19 : elfutils-0.158-3.fc19 (2014-5031)

Fix CVE-2014-0172 elfutils: integer overflow, leading to a heap-based buffer overflow in libdw. Update to 0.158. Support for aarch64. Unwinder support for i386, x8664, s390, s390x, ppc and ppc64. Add eu-stack. Note that Tenable Network Security has extracted the preceding description block direct...

Fedora Update for elfutils FEDORA-2014-5015

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for elfutils FEDORA-2014-5015

Check for the Version of elfutils OpenVAS Vulnerability Test Fedora Update for elfutils FEDORA-2014-5015 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...