In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html Mailing List, Patch
- https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html Mailing List, Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · elfutils_projectNVD modified 2026-10-14 12:17
Affected (CPE criteria) 1
cpe:2.3:a:elfutils_project:elfutils:0.183:*:*:*:*:*:*:*
References 5
- https://sourceware.org/bugzilla/show_bug.cgi?id=27501 Exploit, Issue Tracking
- https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html Mailing List, Patch
- https://sourceware.org/bugzilla/show_bug.cgi?id=27501 Exploit, Issue Tracking
- https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html Mailing List, Patch
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html