Unscored CVE-2020-24821 EUVD-2020-17530GHSA-5368-22cm-w5cv

A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a seg…

Published Aug 4, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Package: libelfin Package: libelfin Ecosystem: Debian Ecosystem: Ubuntu

Description

A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 12	libelfin	No fix yet	—

Ubuntu