EUVD-2018-10043

Malware in sbrugna...

elfutils:fuzz-libdwfl: Crash in __elf64_getphdr_wrlock

Detailed Report: https://oss-fuzz.com/testcase?key=5817803392483328 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerubsanelfutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79faf2775000 Crash State: elf64getphdrwrlock gelfgetphdr...

elfutils:fuzz-libdwfl: Heap-buffer-overflow in __libelf_set_data_list_rdlock

Detailed Report: https://oss-fuzz.com/testcase?key=6310572573655040 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerasanelfutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x780ce98b6000 Crash State: libelfsetdatalistrdlock...

elfutils:fuzz-libdwfl: Crash in load_shdr_wrlock

Detailed Report: https://oss-fuzz.com/testcase?key=5773761388544000 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerubsanelfutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7e8ec315b9b4 Crash State: loadshdrwrlock gelfgetshdr scndwarftype...

elfutils:fuzz-libdwfl: Heap-buffer-overflow in gelf_getshdr

Detailed Report: https://oss-fuzz.com/testcase?key=5433808192339968 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerasanelfutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x516000000bac Crash State: gelfgetshdr...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in __libelf_read_mmaped_file

Detailed Report: https://oss-fuzz.com/testcase?key=6605030137593856 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libelfreadmmapedfile readfile lockdupelf...

elfutils:fuzz-libdwfl: Check failed in CheckUnwind

Detailed Report: https://oss-fuzz.com/testcase?key=5624595337248768 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Check failed Crash Address: Crash State: CheckUnwind elfend libdwopenelf Sanitizer: memory MSAN...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in check_section

Detailed Report: https://oss-fuzz.com/testcase?key=6538272475316224 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: checksection dwarfbeginelf loaddw...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in check_section

Detailed Report: https://oss-fuzz.com/testcase?key=6724057145147392 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: checksection dwarfbeginelf loaddw...

SUSE CVE-2018-18310

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in elf_compress_gnu

Detailed Report: https://oss-fuzz.com/testcase?key=4725021634854912 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: elfcompressgnu checksection dwarfbeginelf...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in process_file

Detailed Report: https://oss-fuzz.com/testcase?key=5736328928559104 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: processfile processfile dwflreportoffline...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in dwfl_report_module

Detailed Report: https://oss-fuzz.com/testcase?key=6448716024774656 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: dwflreportmodule libdwflreportelf...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in find_debuginfo_in_path

Detailed Report: https://oss-fuzz.com/testcase?key=5859104961200128 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: finddebuginfoinpath...

elfutils:fuzz-libdwfl: Crash in read_long_names

Detailed Report: https://oss-fuzz.com/testcase?key=5787862593830912 Project: elfutils Fuzzing Engine: afl Fuzz Target: fuzz-libdwfl Job Type: aflasanelfutils Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7fdae5ef5000 Crash State: readlongnames libelfnextarhdrwrlock dupelf Sanitizer:...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in __libelf_read_mmaped_file

Detailed Report: https://oss-fuzz.com/testcase?key=6298551989174272 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libelfreadmmapedfile elfmemory decompress...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in __libdw_gunzip

Detailed Report: https://oss-fuzz.com/testcase?key=5742116662280192 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libdwgunzip decompress libdwopenelf...

elfutils:fuzz-libdwfl: Heap-buffer-overflow in strtol

Detailed Report: https://oss-fuzz.com/testcase?key=4673586076450816 Project: elfutils Fuzzing Engine: honggfuzz Fuzz Target: fuzz-libdwfl Job Type: honggfuzzasanelfutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7fffe2c93000 Crash State: strtol libelfnextarhdrwrloc...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service. It is due to invalid memory address dereference occured in dwflsegmentreportmodule.c in libdwfl when an attacker passes a malicious ELF file...

The vulnerability of the libdwfl library in the ELF Elfutils utility for modifying and analyzing binary files allows a attacker to cause a service failure.

The vulnerability of the libdwfl library’s dwflsegmentreportmodule.c file, a tool for modifying and analyzing binary ELF files, is due to a buffer overflow segmentation fault. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created ELF file...