Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Binutils readelf 安全漏洞
Vulnerability Description
GNU Binutils readelf是美国GNU社区的一个命令行工具。 GNU Binutils readelf 2.46及之前版本存在安全漏洞,该漏洞源于处理特制ELF二进制文件时GOT重定位处理不当,可能导致双重释放和程序中止,造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A