CVE-2020-21047: Medium severity centos elfutils vulnerability
Last updated 24 July 2024
Other sources
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-21047?
CVE-2020-21047 has a severity rating related to denial-of-service due to application crashes.
How do I fix CVE-2020-21047?
To fix CVE-2020-21047, upgrade to elfutils version 0.183-1, 0.188-2.1, or 0.192-4.
Which versions of elfutils are affected by CVE-2020-21047?
Versions of elfutils prior to 0.183-1, including 0.177, are affected by CVE-2020-21047.
What types of vulnerabilities are associated with CVE-2020-21047?
CVE-2020-21047 is associated with out-of-bounds write, off-by-one error, and reachable assertion vulnerabilities.
Is there a known exploit for CVE-2020-21047?
While there are indications of a denial-of-service risk, there is no public exploit specifically documented for CVE-2020-21047.