libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade elfutils | Sep 18, 2025 | Sep 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade elfutils-develUpgrade elfutils-devel-staticUpgrade elfutils-default-yama-scopeUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libsUpgrade elfutils-libelf-develUpgrade elfutils-debuginfoUpgrade elfutilsUpgrade elfutils-libelf | Apr 27, 2020 | Sep 3, 2018 |
| Centos_linux | — | Upgrade elfutils-develUpgrade elfutils-libelf-develUpgrade elfutils-devel-staticUpgrade elfutils-libelf-devel-staticUpgrade elfutilsUpgrade elfutils-default-yama-scopeUpgrade elfutils-libelfUpgrade elfutils-debuginfoUpgrade elfutils-libs | Aug 28, 2019 | Sep 3, 2018 |
| Debian | — | Upgrade elfutils | Nov 29, 2021 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade elfutils-default-yama-scopeUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-libelfUpgrade elfutils-libsUpgrade elfutils-libelf-devel | Nov 19, 2019 | Sep 3, 2018 |
| Oracle_linux | — | Upgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-libsUpgrade elfutils-develUpgrade elfutils-libelf-develUpgrade elfutils-libelf-devel-staticUpgrade elfutils-default-yama-scopeUpgrade elfutils-devel-static | Jul 21, 2020 | Aug 15, 2018 |
| Redhat_linux | — | Upgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-devel-staticUpgrade elfutils-default-yama-scopeUpgrade elfutils-libelf-develUpgrade elfutils-libsUpgrade elfutils-libelf-devel-staticUpgrade elfutils-debuginfo | Aug 7, 2019 | Sep 3, 2018 |
| Suse | — | Upgrade libasm-develUpgrade libelf1-32bitUpgrade libasm1Upgrade libelf-devel-32bitUpgrade libebl-pluginsUpgrade libelf1Upgrade libdw1-32bitUpgrade libasm1-32bitUpgrade libdw1Upgrade elfutilsUpgrade elfutils-langUpgrade libebl-develUpgrade libelf-develUpgrade libdw-develUpgrade libebl-plugins-32bit | Jun 20, 2019 | Sep 3, 2018 |
| Ubuntu | — | Upgrade libdw1Upgrade libasm1Upgrade elfutilsUpgrade libelf1 | Jun 10, 2019 | Sep 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub