9 matches found
CVE-2017-7608
Technical details about CVE-2017-7608 are not publicly provided in the supplied Connected documents. The initial description notes a heap-based read in ebl_object_note_type_name but no further details or remediation in these sources.
CVE-2017-7611
CVE-2017-7611 affects Elfutils 0.168, where the check_symtab_shndx function in elflint.c is vulnerable to a heap-based buffer over-read via a crafted ELF file, leading to denial of service (application crash). The Connected documents also describe related ELF utils DoS variants (e.g., 2017-7612/7...
CVE-2017-7610
CVE-2017-7610 refers to a vulnerability in elfutils 0.168 where the check_group function in elflint.c can be triggered by a crafted ELF file to cause a heap-based buffer over-read and application crash. The initial description states the vulnerability and impact; no connected documents provide ad...
CVE-2017-7612
CVE-2017-7612 affects Elfutils (elflint.c) with a heap-based buffer over-read in check_sysv_hash, enabling a crafted ELF file to cause a denial of service (application crash). The connected IBM CVE list confirms the same root cause and impact framing for Elfutils; no additional product/version de...
CVE-2017-7613
CVE-2017-7613 affects Elfutils 0.168. The vulnerability arises from memory allocation failure in elflint.c when opening a crafted ELF file, leading to denial of service via memory exhaustion. Affected product: Elfutils (version 0.168). Root cause: insufficient validation of number of sections/seg...
CVE-2017-7607
CVE-2017-7607 affects the Elfutils project (readelf.c, handle_gnu_hash) with a vulnerability in elfutils 0.168 where a crafted ELF file can trigger a heap-based buffer over-read, causing an application crash. The Initial Description explicitly notes the crash vector via a crafted ELF file. Connec...
CVE-2017-7609
Technical details about CVE-2017-7609 are not publicly provided in the connected documents. Please monitor for updates from the source or vendor advisories to obtain affected products, impact, and remediation information.
CVE-2016-10255
Elfutils: CVE-2016-10255 affects the __libelf_set_rawdata_wrlock path in elf_getdata.c, where crafted sh_off/sh_size ELF header values can trigger a memory allocation failure and crash. This corresponds to memory allocation issues that enable a Denial of Service via a crafted ELF file. Affected p...
CVE-2016-10254
CVE-2016-10254 affects Elfutils. The vulnerability is due to memory allocation failure in allocate_elf (common.h), where crafting an ELF file can crash the program and cause a denial of service. The documents do not provide a remediation/patch details; only indicate Elfutils before 0.168 as affec...