The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade elfutils | Jul 30, 2024 | Mar 23, 2017 |
| Gentoo Linux | — | Upgrade dev-libs/elfutils. | Oct 30, 2017 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade elfutils-libelfUpgrade elfutilsUpgrade elfutils-libsUpgrade elfutils-develUpgrade elfutils-libelf-devel | Nov 30, 2017 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutils-libsUpgrade elfutilsUpgrade elfutils-libelf | Nov 30, 2017 | Mar 23, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 9, 2016 |
| Suse | — | Upgrade libdw1-32bitUpgrade libasm1-32bitUpgrade elfutilsUpgrade libasm-develUpgrade libdw1Upgrade libdw-develUpgrade libelf-develUpgrade libasm1Upgrade libebl1-32bitUpgrade libelf1Upgrade libelf1-32bitUpgrade libebl-develUpgrade libebl1 | Jul 4, 2019 | Mar 23, 2017 |
| Ubuntu | — | Upgrade libasm1Upgrade libdw1Upgrade elfutilsUpgrade libelf1 | Jun 12, 2018 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub