Vulnerability Details : CVE-2016-10255
The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2016-10255
- cpe:2.3:a:elfutils_project:elfutils:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-10255
0.40%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 59 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-10255
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2016-10255
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-10255
-
https://usn.ubuntu.com/3670-1/
USN-3670-1: elfutils vulnerabilities | Ubuntu security notices
-
https://bugzilla.redhat.com/show_bug.cgi?id=1387584
1387584 – memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)Issue Tracking;Third Party Advisory
-
https://lists.fedorahosted.org/archives/list/elfutils-devel@lists.fedorahosted.org/thread/Q4LE47FPEVRZANMV6JE2NMHYO4H5MHGJ/
[PATCH] libelf: Sanity check offset and size before trying to malloc and read data. - elfutils-devel - Fedora Mailing-ListsThird Party Advisory
-
https://blogs.gentoo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-__libelf_set_rawdata_wrlock-elf_getdata-c/
elfutils: memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c) | agostino's blogThird Party Advisory
-
http://www.openwall.com/lists/oss-security/2017/03/22/1
oss-security - Re: elfutils: memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)Mailing List;Third Party Advisory
-
https://security.gentoo.org/glsa/201710-10
elfutils: Multiple vulnerabilities (GLSA 201710-10) — Gentoo security
Jump to