elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

...

Vulnerability of the handle_verdef() function in the readelf.c utility for modifying and analyzing ELF binary files. This utility allows an attacker to cause a service failure.

The vulnerability of the handleverdef function in the readelf.c utility for modifying and analyzing ELF binary files in Elfutils is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cuviper Elfutils Security Vulnerability

Cuviper Elfutils is a collection of utilities and libraries for reading, creating, and modifying ELF binaries from the individual developers at Cuviper. A security vulnerability exists in Cuviper Elfutils version v0.189, which stems from the handleverdef function in readelf.c containing a NULL...

PT-2023-8712 · Elfutils +3 · Elfutils +3

Name of the Vulnerable Software and Affected Versions: elfutils version 0.189 Description: The issue is related to a NULL pointer dereference via the handle verdef function at readelf.c in the elfutils utility. This could allow an attacker to cause a denial of service. Recommendations: For elfuti...

radare buffer overflow vulnerability (CNVD-2017-34472)

adare is a set of libraries and tools for working with binary files. A memory corruption vulnerability in the 'storeversioninfognuverdef' function and 'storeversioninfognuverneed' function in the libr/bin/format/elf/elf.c file in radare 2.0.1 originates when the program allocates memory...

UBUNTU-CVE-2017-16359

In radare 2.0.1, a pointer wraparound vulnerability exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c...

UBUNTU-CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

radare2 denial of service vulnerability (CNVD-2017-32216)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'storeversioninfognuverdef' function in the libr/bin/format/elf/elf.c file in radare2 version 2.0.0. A remote attacker can exploit this vulnerability to cause a denial of service invalid...

CVE-2017-15385

The storeversioninfognuverdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service rreadle16 invalid write and application crash or possibly have unspecified other impact via a crafted ELF file...