In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade elfutils | Aug 22, 2024 | Feb 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade elfutilsUpgrade elfutils-libelf-develUpgrade elfutils-debuginfoUpgrade elfutils-develUpgrade elfutils-devel-staticUpgrade elfutils-libsUpgrade elfutils-libelfUpgrade elfutils-default-yama-scopeUpgrade elfutils-libelf-devel-static | Apr 27, 2020 | Feb 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2019 |
| Centos_linux | — | Upgrade elfutils-devel-staticUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-default-yama-scopeUpgrade elfutils-debuginfoUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libelfUpgrade elfutils-libelf-develUpgrade elfutils-libs-debuginfoUpgrade elfutils-libelf-debuginfoUpgrade elfutils-debugsourceUpgrade elfutils-libs | Aug 28, 2019 | Feb 9, 2019 |
| Debian | — | Upgrade elfutils | Mar 12, 2019 | Feb 9, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade elfutilsUpgrade elfutils-develUpgrade elfutils-libelf-develUpgrade elfutils-libsUpgrade elfutils-libelf | Dec 4, 2019 | Feb 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutilsUpgrade elfutils-libelfUpgrade elfutils-libs | Dec 18, 2019 | Feb 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade elfutils-libsUpgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutils-default-yama-scopeUpgrade elfutilsUpgrade elfutils-libelf | Nov 19, 2019 | Feb 9, 2019 |
| Oracle_linux | — | Upgrade elfutils-devel-staticUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-libelfUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libelf-develUpgrade elfutils-default-yama-scopeUpgrade elfutils-libs | Jul 21, 2020 | Jan 12, 2019 |
| Redhat_linux | — | Upgrade elfutils-libelfUpgrade elfutils-debuginfoUpgrade elfutils-devel-staticUpgrade elfutils-debugsourceNo solution existsUpgrade elfutils-libelf-develUpgrade elfutils-libelf-debuginfoUpgrade elfutils-default-yama-scopeUpgrade elfutils-libelf-devel-staticUpgrade elfutilsUpgrade elfutils-libsUpgrade elfutils-libs-debuginfoUpgrade elfutils-devel | Aug 7, 2019 | Feb 9, 2019 |
| Suse | — | Upgrade libasm1Upgrade libelf1-32bitUpgrade libebl1Upgrade libebl-develUpgrade libebl-pluginsUpgrade libelf-develUpgrade libdw1Upgrade libelf1Upgrade libdw1-32bitUpgrade libasm-develUpgrade libdw-develUpgrade elfutilsUpgrade libebl1-32bitUpgrade libelf-devel-32bitUpgrade libasm1-32bitUpgrade libebl-plugins-32bitUpgrade elfutils-lang | Jun 20, 2019 | Feb 9, 2019 |
| Ubuntu | — | Upgrade elfutilsUpgrade libasm1 (Ubuntu Pro)Upgrade libelf1Upgrade libdw1Upgrade libasm1Upgrade libelf1 (Ubuntu Pro)Upgrade libdw1 (Ubuntu Pro)Upgrade elfutils (Ubuntu Pro) | Jun 10, 2019 | Feb 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub