CVE-2021-33294: Medium severity Elfutils Project Elfutils vulnerability
In elfutils 0.183, an infinite loop was found in the function handlesymtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/elfutilsto a version that resolves this vulnerability.Fixed in 0.188-2.1Fixed in 0.192-4
Event History
Frequently Asked Questions
What is the severity of CVE-2021-33294?
CVE-2021-33294 has been classified as a denial of service vulnerability due to an infinite loop in the elfutils library.
How do I fix CVE-2021-33294?
To fix CVE-2021-33294, upgrade elfutils to version 0.188-2.1 or later, or 0.192-4 or later.
What software is affected by CVE-2021-33294?
CVE-2021-33294 affects elfutils version 0.183 and older versions prior to 0.188-2.1 and 0.192-4.
What kind of attack can exploit CVE-2021-33294?
CVE-2021-33294 can be exploited to cause a denial of service through crafted ELF files leading to an infinite loop.
Is CVE-2021-33294 publicly known?
Yes, CVE-2021-33294 is publicly documented and reported in the elfutils project communications.