PublicDateAtUSN: 2017-03-23
Candidate: CVE-2016-10254
PublicDate: 2017-03-23 16:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10254
 https://blogs.gentoo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-allocate_elf-common-h/
 https://ubuntu.com/security/notices/USN-3670-1
Description:
 The allocate_elf function in common.h in elfutils before 0.168 allows
 remote attackers to cause a denial of service (crash) via a crafted ELF
 file, which triggers a memory allocation failure.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by: Agostino Sarubbo
Assigned-to: mdeslaur
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [5.5 MEDIUM]

Patches_elfutils:
 upstream: https://sourceware.org/git/?p=elfutils.git;a=commitdiff;h=191000fdedba3fafe4d5b8cddad3f3318b49c3fb
upstream_elfutils: released (0.168-0.2)
precise_elfutils: ignored (reached end-of-life)
precise/esm_elfutils: ignored (end of ESM support, was needed)
trusty_elfutils: released (0.158-0ubuntu5.3)
trusty/esm_elfutils: released (0.158-0ubuntu5.3)
vivid/stable-phone-overlay_elfutils: ignored (reached end-of-life)
vivid/ubuntu-core_elfutils: DNE
xenial_elfutils: released (0.165-3ubuntu1.1)
esm-infra/xenial_elfutils: released (0.165-3ubuntu1.1)
yakkety_elfutils: ignored (reached end-of-life)
zesty_elfutils: ignored (reached end-of-life)
artful_elfutils: released (0.168-0.2)
bionic_elfutils: released (0.168-0.2)
cosmic_elfutils: released (0.168-0.2)
disco_elfutils: released (0.168-0.2)
eoan_elfutils: released (0.168-0.2)
focal_elfutils: released (0.168-0.2)
groovy_elfutils: released (0.168-0.2)
hirsute_elfutils: released (0.168-0.2)
devel_elfutils: released (0.168-0.2)