There is a vulnerability in elfls, which can cause SEGV on unknown address.

[law4D]

The 'elfls' of the lastest version run as "./elfls <poc_file>", which can cause SEGV on unknown address. A PoC can be found at PoC_elfls.zip

==13047==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000020 (pc 0x000000401ff0 bp 0x000000000000 sp 0x7ffe5a7c2430 T0)
#0 0x401fef in makenumberfmts ./ELFkickers-master/elfls/elfls.c:568
#1 0x401fef in main ./ELFkickers-master/elfls/elfls.c:916
#2 0x7f25a169782f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
#3 0x406f28 in _start (./ELFkickers-master/install/bin/elfls+0x406f28)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV ./ELFkickers-master/elfls/elfls.c:568 makenumberfmts
==13047==ABORTING

[law4D]

The affected version of ELFkickers can be found at
https://github.com/BR903/ELFkickers/tree/e1af22cc152abc9e9c8d28e8011fd39d33e8e3c1