The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade elfutils | Aug 22, 2024 | Jan 29, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 29, 2019 |
| Debian | — | Upgrade elfutils | Jul 30, 2024 | Jan 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade elfutils-libelfUpgrade elfutils-libsUpgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutils | Dec 4, 2019 | Jan 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade elfutils-libelf-develUpgrade elfutils-libsUpgrade elfutils-develUpgrade elfutilsUpgrade elfutils-libelf | Dec 18, 2019 | Jan 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade elfutils-libelf-develUpgrade elfutils-libsUpgrade elfutils-libelfUpgrade elfutils-default-yama-scopeUpgrade elfutilsUpgrade elfutils-devel | Dec 11, 2019 | Jan 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-devel-staticUpgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutils-libsUpgrade elfutils-libelf-devel-staticUpgrade elfutils-default-yama-scope | Nov 19, 2019 | Jan 29, 2019 |
| Suse | — | Upgrade libebl-develUpgrade libdwarves-devel-32bitUpgrade libelf-devel-32bitUpgrade elfutils-langUpgrade libdw1Upgrade libebl-pluginsUpgrade libdw1-32bitUpgrade dwarvesUpgrade libasm-develUpgrade libdwarves1-32bitUpgrade libasm1-32bitUpgrade libelf1Upgrade libelf-develUpgrade libdwarves-develUpgrade libebl-plugins-32bitUpgrade libasm1Upgrade libelf1-32bitUpgrade libdwarves1Upgrade elfutilsUpgrade libdw-devel | Aug 9, 2024 | Jan 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub