libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade elfutils | Sep 18, 2025 | Sep 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade elfutilsUpgrade elfutils-libelfUpgrade elfutils-default-yama-scopeUpgrade elfutils-debuginfoUpgrade elfutils-libsUpgrade elfutils-develUpgrade elfutils-libelf-devel-staticUpgrade elfutils-devel-staticUpgrade elfutils-libelf-devel | Apr 27, 2020 | Sep 3, 2018 |
| Centos_linux | — | Upgrade elfutils-libsUpgrade elfutils-default-yama-scopeUpgrade elfutils-debuginfoUpgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutils-devel-staticUpgrade elfutils-libelf-devel-static | Aug 28, 2019 | Sep 3, 2018 |
| Debian | — | Upgrade elfutils | Jul 30, 2024 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade elfutilsUpgrade elfutils-libelfUpgrade elfutils-develUpgrade elfutils-libsUpgrade elfutils-libelf-devel | Jun 17, 2020 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade elfutils-libsUpgrade elfutils-develUpgrade elfutils-libelf-develUpgrade elfutils-libelfUpgrade elfutils | Nov 19, 2019 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade elfutils-default-yama-scopeUpgrade elfutils-libsUpgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-libelf-develUpgrade elfutils-devel | Nov 19, 2019 | Sep 3, 2018 |
| Oracle_linux | — | Upgrade elfutils-develUpgrade elfutils-libelf-develUpgrade elfutils-default-yama-scopeUpgrade elfutils-devel-staticUpgrade elfutilsUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libelfUpgrade elfutils-libs | Jul 21, 2020 | Aug 15, 2018 |
| Redhat_linux | — | Upgrade elfutils-libsUpgrade elfutils-devel-staticUpgrade elfutils-debuginfoUpgrade elfutils-libelf-devel-staticUpgrade elfutils-default-yama-scopeUpgrade elfutils-develUpgrade elfutils-libelf-develNo solution existsUpgrade elfutils-libelfUpgrade elfutils | Aug 7, 2019 | Sep 3, 2018 |
| Suse | — | Upgrade libasm1Upgrade elfutilsUpgrade libasm-develUpgrade libelf-devel-32bitUpgrade libelf-develUpgrade libdw-develUpgrade libebl1Upgrade libelf1-32bitUpgrade libebl-plugins-32bitUpgrade libebl1-32bitUpgrade libasm1-32bitUpgrade libdw1-32bitUpgrade libebl-develUpgrade libebl-pluginsUpgrade libelf1Upgrade libdw1Upgrade elfutils-lang | Jun 20, 2019 | Sep 3, 2018 |
| Ubuntu | — | Upgrade elfutils (Ubuntu Pro)Upgrade libasm1Upgrade libelf1 (Ubuntu Pro)Upgrade libdw1 (Ubuntu Pro)Upgrade libasm1 (Ubuntu Pro)Upgrade libelf1Upgrade elfutilsUpgrade libdw1 | Jun 10, 2019 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub