CVE-2016-10255

CVE-2016-10255 is a denial-of-service vulnerability in elfutils versions prior to 0.168, affecting the __libelf_set_rawdata_wrlock function. An attacker can trigger a memory allocation failure and crash the system by providing a crafted sh_off or sh_size ELF header value. Rated Medium (CVSS 5.5), this vulnerability requires local access and user interaction (e.g., opening a malicious ELF file) to exploit, leading to high availability impact but no confidentiality or integrity loss. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.