libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-elfutils | Sep 18, 2025 | Sep 3, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-elfutilsamazon-linux-ami-2-upgrade-elfutils-debuginfoamazon-linux-ami-2-upgrade-elfutils-default-yama-scopeamazon-linux-ami-2-upgrade-elfutils-develamazon-linux-ami-2-upgrade-elfutils-devel-staticamazon-linux-ami-2-upgrade-elfutils-libelfamazon-linux-ami-2-upgrade-elfutils-libelf-develamazon-linux-ami-2-upgrade-elfutils-libelf-devel-staticamazon-linux-ami-2-upgrade-elfutils-libs | Apr 27, 2020 | Sep 3, 2018 | |
| Centos_linux | — | centos-upgrade-elfutilscentos-upgrade-elfutils-debuginfocentos-upgrade-elfutils-default-yama-scopecentos-upgrade-elfutils-develcentos-upgrade-elfutils-devel-staticcentos-upgrade-elfutils-libelfcentos-upgrade-elfutils-libelf-develcentos-upgrade-elfutils-libelf-devel-staticcentos-upgrade-elfutils-libs | Aug 28, 2019 | Sep 3, 2018 |
| Debian | debian-upgrade-elfutils | Jul 30, 2024 | Sep 3, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-elfutilshuawei-euleros-2_0_sp2-upgrade-elfutils-develhuawei-euleros-2_0_sp2-upgrade-elfutils-libelfhuawei-euleros-2_0_sp2-upgrade-elfutils-libelf-develhuawei-euleros-2_0_sp2-upgrade-elfutils-libs | Jun 17, 2020 | Sep 3, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-elfutilshuawei-euleros-2_0_sp3-upgrade-elfutils-develhuawei-euleros-2_0_sp3-upgrade-elfutils-libelfhuawei-euleros-2_0_sp3-upgrade-elfutils-libelf-develhuawei-euleros-2_0_sp3-upgrade-elfutils-libs | Nov 19, 2019 | Sep 3, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-elfutilshuawei-euleros-2_0_sp5-upgrade-elfutils-default-yama-scopehuawei-euleros-2_0_sp5-upgrade-elfutils-develhuawei-euleros-2_0_sp5-upgrade-elfutils-libelfhuawei-euleros-2_0_sp5-upgrade-elfutils-libelf-develhuawei-euleros-2_0_sp5-upgrade-elfutils-libs | Nov 19, 2019 | Sep 3, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-elfutilsoracle-linux-upgrade-elfutils-default-yama-scopeoracle-linux-upgrade-elfutils-develoracle-linux-upgrade-elfutils-devel-staticoracle-linux-upgrade-elfutils-libelforacle-linux-upgrade-elfutils-libelf-develoracle-linux-upgrade-elfutils-libelf-devel-staticoracle-linux-upgrade-elfutils-libs | Jul 21, 2020 | Aug 15, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-elfutilsredhat-upgrade-elfutils-debuginforedhat-upgrade-elfutils-default-yama-scoperedhat-upgrade-elfutils-develredhat-upgrade-elfutils-devel-staticredhat-upgrade-elfutils-libelfredhat-upgrade-elfutils-libelf-develredhat-upgrade-elfutils-libelf-devel-staticredhat-upgrade-elfutils-libs | Aug 7, 2019 | Sep 3, 2018 | |
| Suse | — | suse-upgrade-elfutilssuse-upgrade-elfutils-langsuse-upgrade-libasm-develsuse-upgrade-libasm1suse-upgrade-libasm1-32bitsuse-upgrade-libdw-develsuse-upgrade-libdw1suse-upgrade-libdw1-32bitsuse-upgrade-libebl-develsuse-upgrade-libebl-pluginssuse-upgrade-libebl-plugins-32bitsuse-upgrade-libebl1suse-upgrade-libebl1-32bitsuse-upgrade-libelf-develsuse-upgrade-libelf-devel-32bitsuse-upgrade-libelf1suse-upgrade-libelf1-32bit | Jun 20, 2019 | Sep 3, 2018 |
| Ubuntu | ubuntu-pro-upgrade-elfutilsubuntu-pro-upgrade-libasm1ubuntu-pro-upgrade-libdw1ubuntu-pro-upgrade-libelf1ubuntu-upgrade-elfutilsubuntu-upgrade-libasm1ubuntu-upgrade-libdw1ubuntu-upgrade-libelf1 | Jun 10, 2019 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub