CVE-2025-1377
- EPSS 0.06%
- Veröffentlicht 17.02.2025 05:15:10
- Zuletzt bearbeitet 04.11.2025 20:26:20
A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs ...
CVE-2025-1376
- EPSS 0.06%
- Veröffentlicht 17.02.2025 05:15:09
- Zuletzt bearbeitet 04.11.2025 20:21:18
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible t...
CVE-2025-1372
- EPSS 0.1%
- Veröffentlicht 17.02.2025 03:15:09
- Zuletzt bearbeitet 04.11.2025 20:19:09
A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argume...
CVE-2025-1371
- EPSS 0.05%
- Veröffentlicht 17.02.2025 03:15:09
- Zuletzt bearbeitet 04.11.2025 20:13:36
A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Atta...
CVE-2025-1365
- EPSS 0.06%
- Veröffentlicht 17.02.2025 00:15:09
- Zuletzt bearbeitet 04.11.2025 20:07:34
A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_symtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local acces...
CVE-2025-1352
- EPSS 0.34%
- Veröffentlicht 16.02.2025 15:15:09
- Zuletzt bearbeitet 03.11.2025 20:34:23
A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory ...
- EPSS 0.01%
- Veröffentlicht 20.02.2024 18:15:52
- Zuletzt bearbeitet 25.04.2025 20:42:23
elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.
CVE-2020-21047
- EPSS 0.01%
- Veröffentlicht 22.08.2023 19:16:09
- Zuletzt bearbeitet 21.11.2024 05:12:23
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion...
CVE-2021-33294
- EPSS 0.02%
- Veröffentlicht 18.07.2023 14:15:11
- Zuletzt bearbeitet 21.11.2024 06:08:39
In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.
CVE-2019-7665
- EPSS 0.14%
- Veröffentlicht 09.02.2019 16:29:00
- Zuletzt bearbeitet 21.11.2024 04:48:29
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does n...