In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file.(CVE-2021-33294)

Tenable has extracted the preceding description block directly from the EulerOS elfutils security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the elfutils package has been released.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of     service (CVE-2021-33294)

  - elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at     readelf.c. (CVE-2024-25260)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the elfutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6322-1 advisory.

    It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system     were tricked into processing a specially crafted file, elfutils could be made to crash or consume     resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2018-16062,     CVE-2018-16403, CVE-2018-18310, CVE-2018-18520, CVE-2018-18521, CVE-2019-7149, CVE-2019-7150,     CVE-2019-7665)

    It was discovered that elfutils incorrectly handled bounds checks in certain functions when processing     malformed files. If a user or automated system were tricked into processing a specially crafted file,     elfutils could be made to crash or consume resources, resulting in a denial of service. (CVE-2020-21047,     CVE-2021-33294)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of elfutils installed on the remote host is prior to 0.176-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2197 advisory.

    In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207197	EulerOS 2.0 SP9 : elfutils (EulerOS-SA-2024-2361)	Nessus	Huawei Local Security Checks	medium
207161	EulerOS 2.0 SP9 : elfutils (EulerOS-SA-2024-2386)	Nessus	Huawei Local Security Checks	medium
204650	Photon OS 3.0: Elfutils PHSA-2023-3.0-0643	Nessus	PhotonOS Local Security Checks	medium
204576	Photon OS 4.0: Elfutils PHSA-2023-4.0-0452	Nessus	PhotonOS Local Security Checks	medium
199457	RHEL 8 : elfutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
195594	RHEL 7 : elfutils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
195525	RHEL 6 : elfutils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
188549	EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2023-3170)	Nessus	Huawei Local Security Checks	medium
188429	EulerOS Virtualization 2.10.0 : elfutils (EulerOS-SA-2023-3466)	Nessus	Huawei Local Security Checks	medium
188327	EulerOS Virtualization 2.10.1 : elfutils (EulerOS-SA-2023-3494)	Nessus	Huawei Local Security Checks	medium
188117	EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2023-3205)	Nessus	Huawei Local Security Checks	medium
180321	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : elfutils vulnerabilities (USN-6322-1)	Nessus	Ubuntu Local Security Checks	medium
179778	Amazon Linux 2 : elfutils (ALAS-2023-2197)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2021-33294

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium