Every CVE Search/ Get API key

CVE-2016-10255

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote...

5.5 MediumFix available

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.70%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Record
CVE-2016-10255
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Record
CVE-2016-10255
Updated
2026-11-02
EUVDEUVD-2016-1440 No score

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Record
EUVD-2016-1440
Updated
2026-11-03
GitHub AdvisoriesGHSA-j343-3qch-m53h 5.5

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote...

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Record
GHSA-j343-3qch-m53h
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
OSVBELL-CVE-2016-10255 5.5

CVE-2016-10255 does not affect BellSoft software

Record
BELL-CVE-2016-10255
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Record
CVE-2016-10255
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2016-10255 5.5

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Record
DEBIAN-CVE-2016-10255
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-10255 5.5

The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.

Record
UBUNTU-CVE-2016-10255
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2018-0027 No score

Updated elfutils packages fix security vulnerabilities

The elfutils package has been updated to version 0.169 to fix several bugs that can lead to memory allocation failures or heap overflows (CVE-2016-10254, CVE-2016-10255, CVE-2017-7607, CVE-2017-7608, CVE-2017-7609, CVE-2017-7610, CVE-2017-7611, CVE-2017-7612, CVE-2017-7613).

Record
MGASA-2018-0027
Updated
2026-11-02
OSVSUSE-SU-2019:1733-1 No score

Security update for elfutils

This update for elfutils fixes the following issues:

Security issues fixed:

  • CVE-2018-16403: Fixed a heap-based buffer over-read that could have led to Denial of Service (bsc#1107067).
  • CVE-2016-10254: Fixed a memory allocation failure in alloxate_elf (bsc#1030472).
  • CVE-2019-7665: NT_PLATFORM core file note should be a zero terminated string (bsc#1125007).
  • CVE-2016-10255: Fixed a memory allocation failure in libelf_set_rawdata_wrlock (bsc#1030476).
  • CVE-2019-7150: Added a missing check in dwfl_segment_report_module which could have allowed truncated files to be read (bsc#1123685).
  • CVE-2018-16062: Fixed a heap-buffer-overflow (bsc#1106390).
  • CVE-2017-7611: Fixed a heap-based buffer over-read that could have led to Denial of Service (bsc#1033088).
  • CVE-2017-7613: Fixed denial of service caused by the missing validation of the number of sections and the number of segments in a crafted ELF file (bsc#1033090).
  • CVE-2017-7607: Fixed a heap-based buffer overflow in handle_gnu_hash (bsc#1033084).
  • CVE-2017-7608: Fixed a heap-based buffer overflow in ebl_object_note_type_name() (bsc#1033085).
  • CVE-2017-7610: Fixed a heap-based buffer overflow in check_group (bsc#1033087).
  • CVE-2018-18521: Fixed multiple divide-by-zero vulnerabilities in function arlib_add_symbols() (bsc#1112723).
  • CVE-2017-7612: Fixed a denial of service in check_sysv_hash() via a crafted ELF file (bsc#1033089).
  • CVE-2018-18310: Fixed an invalid address read in dwfl_segment_report_module.c (bsc#1111973).
  • CVE-2018-18520: Fixed bad handling of ar files inside are files (bsc#1112726).
Record
SUSE-SU-2019:1733-1
Updated
2026-11-02
OSVUSN-3670-1 No score

elfutils vulnerabilities

Agostino Sarubbo discovered that elfutils incorrectly handled certain malformed ELF files. If a user or automated system were tricked into processing a specially crafted ELF file, elfutils could be made to crash or consume resources, resulting in a denial of service.

Record
USN-3670-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
elfutils
Debian:12
 before 0.168-0.2
0.168-0.2
elfutils
Debian:13
 before 0.168-0.2
0.168-0.2
elfutils
Debian:14
 before 0.168-0.2
0.168-0.2
elfutils
Mageia:5
 before 0.169-1.mga5
0.169-1.mga5
elfutils
SUSE:Linux Enterprise Desktop 12 SP3
 before 0.158-7.7.2
0.158-7.7.2
elfutils
SUSE:Linux Enterprise Desktop 12 SP4
 before 0.158-7.7.2
0.158-7.7.2
elfutils
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 0.158-7.7.2
0.158-7.7.2
elfutils
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 0.158-7.7.2
0.158-7.7.2
elfutils
SUSE:Linux Enterprise Server 12 SP3
 before 0.158-7.7.2
0.158-7.7.2
elfutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.158-7.7.2
0.158-7.7.2
Show 4 moreShow less
Affected packages
PackageAffectedFixed
elfutils
SUSE:Linux Enterprise Server 12 SP4
 before 0.158-7.7.2
0.158-7.7.2
elfutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 0.158-7.7.2
0.158-7.7.2
elfutils
Ubuntu:14.04:LTS
 before 0.158-0ubuntu5.3, plus listed versions
0.157-1ubuntu10.158-0ubuntu30.158-0ubuntu40.158-0ubuntu50.158-0ubuntu5.10.158-0ubuntu5.2
0.158-0ubuntu5.3
elfutils
Ubuntu:16.04:LTS
 before 0.165-3ubuntu1.1, plus listed versions
0.163-4ubuntu10.163-5.10.164-10.165-30.165-3ubuntu1
0.165-3ubuntu1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-10255 is a medium vulnerability (CVSS 5.5) in Elfutils Project Elfutils, published March 23, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. Fixed in elfutils 0.168-0.2.

References

Show 57 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open