USN-2188-1: elfutils vulnerability
30 April 2014
elfutils could be made to crash or run programs if it processed a specially crafted file.
- elfutils - collection of utilities to handle ELF objects
Florian Weimer discovered that the elfutils libdw library incorrectly
handled malformed compressed debug sections in ELF files. If a user or
automated system were tricked into processing a specially crafted ELF file,
applications linked against libdw could be made to crash, or possibly
execute arbitrary code.