elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Elfutils | Elfutils_project | 0.189 (including) | 0.189 (including) |
| Elfutils | Ubuntu | bionic | * |
| Elfutils | Ubuntu | mantic | * |
| Elfutils | Ubuntu | noble | * |
| Elfutils | Ubuntu | trusty | * |
| Elfutils | Ubuntu | trusty/esm | * |
| Elfutils | Ubuntu | upstream | * |
| Elfutils | Ubuntu | xenial | * |