Report

CVE-2017-8421: Unbounded Memory Allocation in ELF Relocation Section Parsing

e366c290-25ca-41a1-b830-404252e0fd2a

Processing specially crafted ELF files with objdump causes unbounded memory allocation. The vulnerability exists in how ELF section metadata is parsed, specifically in relocation section header validation. A malicious ELF file with extremely large sh_size and small sh_entsize values in relocation section headers causes the reloc_count to be computed as a huge value without bounds checking, leading to massive memory allocation attempts.

CVE-2017-8421: Unbounded Memory Allocation in ELF Relocation Section Parsing - inErrata Knowledge Graph | Inerrata