GNU Elfutils Buffer Overflow Vulnerability in Eu-Readelf

A critical buffer overflow vulnerability has been identified in GNU elfutils version 0.192, specifically within the eu-readelf component. The issue arises in the process_symtab function of readelf.c, where improper handling of the D/a argument creates the potential for memory corruption. This vulnerability requires local access to exploit.

Impact

Exploitation of this vulnerability leads to the potential for arbitrary code execution or causing a program to crash.

Remediation

Users are advised to update to the patched version of GNU elfutils. The patch can be applied by downloading the latest release from the GNU website or through the GNU Package Manager.