PT-2023-8712 · Elfutils+3 · Elfutils+3
Schsiung
·
Publicado
2023-11-13
·
Atualizado
2025-04-25
·
CVE-2024-25260
CVSS v3.1
4.0
Média
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
elfutils version 0.189
Description
The issue is related to a NULL pointer dereference via the
handle verdef() function at readelf.c in the elfutils utility for modifying and analyzing ELF binary files. This can potentially lead to a buffer overflow in memory. Exploitation of the issue may allow an attacker to cause a denial of service.Recommendations
For elfutils version 0.189, consider disabling the
handle verdef() function as a temporary workaround until a patch is available. Restrict access to the readelf.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
NULL Pointer Dereference
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Linuxmint
Ubuntu
Elfutils