libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade elfutils | Sep 18, 2025 | Sep 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade elfutilsUpgrade elfutils-debuginfoUpgrade elfutils-libelfUpgrade elfutils-libsUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libelf-develUpgrade elfutils-devel-staticUpgrade elfutils-develUpgrade elfutils-default-yama-scope | Apr 27, 2020 | Sep 3, 2018 |
| Centos_linux | — | Upgrade elfutils-debuginfoUpgrade elfutils-libelfUpgrade elfutils-libsUpgrade elfutils-default-yama-scopeUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-libelf-devel-staticUpgrade elfutils-devel-staticUpgrade elfutils-libelf-devel | Aug 28, 2019 | Sep 3, 2018 |
| Debian | — | Upgrade elfutils | Nov 29, 2021 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade elfutils-develUpgrade elfutils-default-yama-scopeUpgrade elfutilsUpgrade elfutils-libsUpgrade elfutils-libelfUpgrade elfutils-libelf-devel | Nov 19, 2019 | Sep 3, 2018 |
| Oracle_linux | — | Upgrade elfutilsUpgrade elfutils-libelfUpgrade elfutils-libelf-develUpgrade elfutils-default-yama-scopeUpgrade elfutils-devel-staticUpgrade elfutils-develUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libs | Jul 21, 2020 | Aug 15, 2018 |
| Redhat_linux | — | Upgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-debuginfoUpgrade elfutils-develUpgrade elfutils-libsUpgrade elfutils-default-yama-scopeUpgrade elfutils-devel-staticUpgrade elfutils-libelf-develUpgrade elfutils-libelf-devel-static | Aug 7, 2019 | Sep 3, 2018 |
| Suse | — | Upgrade libdw1-32bitUpgrade libebl-develUpgrade libasm1-32bitUpgrade libdw1Upgrade libebl-plugins-32bitUpgrade libelf-develUpgrade elfutils-langUpgrade libdw-develUpgrade elfutilsUpgrade libelf1Upgrade libasm-develUpgrade libasm1Upgrade libelf-devel-32bitUpgrade libebl-pluginsUpgrade libelf1-32bit | Jun 20, 2019 | Sep 3, 2018 |
| Ubuntu | — | Upgrade libdw1Upgrade libasm1Upgrade libelf1Upgrade elfutils | Jun 10, 2019 | Sep 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub