The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade elfutils | Jul 30, 2024 | Mar 23, 2017 |
| Gentoo Linux | — | Upgrade dev-libs/elfutils. | Oct 30, 2017 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-libelf-develUpgrade elfutils-libs | Dec 4, 2019 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutils-libsUpgrade elfutils-libelfUpgrade elfutils | Dec 18, 2019 | Mar 23, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 9, 2016 |
| Suse | — | Upgrade elfutilsUpgrade libasm-develUpgrade libasm1Upgrade libelf1Upgrade libasm1-32bitUpgrade libebl1-32bitUpgrade libdw1-32bitUpgrade libelf-develUpgrade libdw1Upgrade libebl-develUpgrade libebl1Upgrade libdw-develUpgrade libelf1-32bit | Jul 5, 2019 | Mar 23, 2017 |
| Ubuntu | — | Upgrade libasm1Upgrade libelf1Upgrade elfutilsUpgrade libdw1 | Jun 12, 2018 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub