Elfutils Project vulnerabilities
Published CVEs affecting Elfutils Project products: 2 record(s), with severity, exploitation and fixes.
CVE-2020-21047
Medium · 5.5
CWE-787 Aug 22, 2023
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers...
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.
CVE-2021-33294
Medium · 5.5
CWE-835 Jul 18, 2023
In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which...
In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.