elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

...

readelf Handle Verdef Buffer Overflow DoS

The vulnerability of the handleverdef function in the readelf.c utility for modifying and analyzing ELF binary files in Elfutils is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cuviper Elfutils Security Vulnerability

Cuviper Elfutils is a collection of utilities and libraries for reading, creating, and modifying ELF binaries from the individual developers at Cuviper. A security vulnerability exists in Cuviper Elfutils version v0.189, which stems from the handleverdef function in readelf.c containing a NULL...

PT-2023-8712

Name of the Vulnerable Software and Affected Versions elfutils version 0.189 Description The issue is related to a NULL pointer dereference via the handle verdef function at readelf.c in the elfutils utility for modifying and analyzing ELF binary files. This can potentially lead to a buffer...

radare buffer overflow vulnerability (CNVD-2017-34472)

adare is a set of libraries and tools for working with binary files. A memory corruption vulnerability in the 'storeversioninfognuverdef' function and 'storeversioninfognuverneed' function in the libr/bin/format/elf/elf.c file in radare 2.0.1 originates when the program allocates memory...

UBUNTU-CVE-2017-16359

In radare 2.0.1, a pointer wraparound vulnerability exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c...

PT-2017-14370

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description A memory corruption issue exists due to improper sh size validation when allocating memory. This is demonstrated by an invalid free in the store versioninfo gnu verdef and store versioninfo gnu verneed functio...

PT-2017-14372

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description A pointer wraparound issue exists in the store versioninfo gnu verdef function in libr/bin/format/elf/elf.c. Recommendations For radare2 version 2.0.1, consider updating to a newer version that contains a fix...

UBUNTU-CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

PT-2017-14291

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description The issue exists in the store versioninfo gnu verdef function in libr/bin/format/elf/elf.c, where an integer exception occurs due to a negative number leading to an invalid memory access. This happens when...

radare2 denial of service vulnerability (CNVD-2017-32216)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'storeversioninfognuverdef' function in the libr/bin/format/elf/elf.c file in radare2 version 2.0.0. A remote attacker can exploit this vulnerability to cause a denial of service invalid...

CVE-2017-15385

The storeversioninfognuverdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service rreadle16 invalid write and application crash or possibly have unspecified other impact via a crafted ELF file...