CVE-2021-33294

medium

Description

In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

References

https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html

https://sourceware.org/bugzilla/show_bug.cgi?id=27501

Details

Source: Mitre, NVD

Published: 2023-07-18

Updated: 2023-07-27

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H