A heap-based buffer over-read was discovered in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_name": "elfutils", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "elfutils-dbgsym", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libasm-dev", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libasm1", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libasm1-dbgsym", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libdw-dev", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libdw1", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libdw1-dbgsym", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libelf-dev", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libelf1", "binary_version": "0.158-0ubuntu5.3+esm1" }, { "binary_name": "libelf1-dbgsym", "binary_version": "0.158-0ubuntu5.3+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "elfutils", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "elfutils-dbgsym", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libasm-dev", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libasm1", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libasm1-dbgsym", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libdw-dev", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libdw1", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libdw1-dbgsym", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libelf-dev", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libelf1", "binary_version": "0.165-3ubuntu1.2" }, { "binary_name": "libelf1-dbgsym", "binary_version": "0.165-3ubuntu1.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "elfutils", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "elfutils-dbgsym", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libasm-dev", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libasm1", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libasm1-dbgsym", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libdw-dev", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libdw1", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libdw1-dbgsym", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libelf-dev", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libelf1", "binary_version": "0.170-0.4ubuntu0.1" }, { "binary_name": "libelf1-dbgsym", "binary_version": "0.170-0.4ubuntu0.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "elfutils", "binary_version": "0.176-1.1" }, { "binary_name": "elfutils-dbgsym", "binary_version": "0.176-1.1" }, { "binary_name": "libasm-dev", "binary_version": "0.176-1.1" }, { "binary_name": "libasm1", "binary_version": "0.176-1.1" }, { "binary_name": "libasm1-dbgsym", "binary_version": "0.176-1.1" }, { "binary_name": "libdw-dev", "binary_version": "0.176-1.1" }, { "binary_name": "libdw1", "binary_version": "0.176-1.1" }, { "binary_name": "libdw1-dbgsym", "binary_version": "0.176-1.1" }, { "binary_name": "libelf-dev", "binary_version": "0.176-1.1" }, { "binary_name": "libelf1", "binary_version": "0.176-1.1" }, { "binary_name": "libelf1-dbgsym", "binary_version": "0.176-1.1" } ] }