Agostino Sarubbo discovered that elfutils incorrectly handled certain malformed ELF files. If a user or automated system were tricked into processing a specially crafted ELF file, elfutils could be made to crash or consume resources, resulting in a denial of service.
{ "binaries": [ { "binary_name": "elfutils", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "elfutils-dbgsym", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libasm-dev", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libasm1", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libasm1-dbgsym", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libdw-dev", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libdw1", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libdw1-dbgsym", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libelf-dev", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libelf1", "binary_version": "0.158-0ubuntu5.3" }, { "binary_name": "libelf1-dbgsym", "binary_version": "0.158-0ubuntu5.3" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "elfutils", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "elfutils-dbgsym", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libasm-dev", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libasm1", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libasm1-dbgsym", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libdw-dev", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libdw1", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libdw1-dbgsym", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libelf-dev", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libelf1", "binary_version": "0.165-3ubuntu1.1" }, { "binary_name": "libelf1-dbgsym", "binary_version": "0.165-3ubuntu1.1" } ], "availability": "No subscription required" }