In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

An update of the elfutils package has been released.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of     service (CVE-2021-33294)

  - elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at     readelf.c. (CVE-2024-25260)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the elfutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6322-1 advisory.

  - dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to     cause a denial of service (heap-based buffer over-read) via a crafted file. (CVE-2018-16062)

  - libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in     dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an     application crash. (CVE-2018-16403)

  - An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in     elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application     crash) with a crafted ELF file, as demonstrated by consider_notes. (CVE-2018-18310)

  - An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174.
    Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes the outer ar     file before handling all inner entries. The vulnerability allows attackers to cause a denial of service     (application crash) with a crafted ELF file. (CVE-2018-18520)

  - Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow     remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated     by eu-ranlib, because a zero sh_entsize is mishandled. (CVE-2018-18521)

  - A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw     in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as     demonstrated by eu-nm. (CVE-2019-7149)

  - An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom     in libelf/elf32_xlatetom.c, due to dwfl_segment_report_module not checking whether the dyn data read from     a core file is truncated. A crafted input can cause a program crash, leading to denial-of-service, as     demonstrated by eu-stack. (CVE-2019-7150)

  - In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in     elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of     service (program crash) because ebl_core_note does not reject malformed core file notes. (CVE-2019-7665)

  - The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from     denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-     by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need     to craft certain ELF files which bypass the missing bound checks. (CVE-2020-21047)

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of elfutils installed on the remote host is prior to 0.176-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2197 advisory.

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
204650	Photon OS 3.0: Elfutils PHSA-2023-3.0-0643	Nessus	PhotonOS Local Security Checks	medium
204576	Photon OS 4.0: Elfutils PHSA-2023-4.0-0452	Nessus	PhotonOS Local Security Checks	medium
199457	RHEL 8 : elfutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
188549	EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2023-3170)	Nessus	Huawei Local Security Checks	medium
188429	EulerOS Virtualization 2.10.0 : elfutils (EulerOS-SA-2023-3466)	Nessus	Huawei Local Security Checks	medium
188327	EulerOS Virtualization 2.10.1 : elfutils (EulerOS-SA-2023-3494)	Nessus	Huawei Local Security Checks	medium
188117	EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2023-3205)	Nessus	Huawei Local Security Checks	medium
180321	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : elfutils vulnerabilities (USN-6322-1)	Nessus	Ubuntu Local Security Checks	medium
179778	Amazon Linux 2 : elfutils (ALAS-2023-2197)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2021-33294

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium