[Bug tools/32657] eu-readelf SEGV (buffer over read) in print_string_section (src/readelf.c:13363)

mark at klomp dot org sourceware-bugzilla@sourceware.org
Tue Feb 18 22:43:56 GMT 2025


https://sourceware.org/bugzilla/show_bug.cgi?id=32657

--- Comment #2 from Mark Wielaard <mark at klomp dot org> ---
Note that someone created CVE-2025-1372 for this bug without following our
SECURITY policy: https://sourceware.org/cgit/elfutils/tree/SECURITY

This is NOT a security issue according to our policy:

  Since most elfutils tools are run in short-lived, local, interactive,
  development context rather than remotely "in production", we generally
  treat malfunctions as ordinary bugs rather than security vulnerabilities.

We request that people who report suspected security vulnerabilities report
them through the contacts in our SECURITY policy and not through non-affiliated
CNAs.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Elfutils-devel mailing list