← Vulnerability feed

Vulnerability record · CVE-2020-21047 · published 22 August 2023

CVE-2020-21047: Elfutils project elfutils out-of-bounds write vulnerability

Elfutils Project · Elfutils

The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.

5.5 CVSS 3.1 Medium EPSS 0.24% · top 86.0% CWE-787 · Out-of-bounds write
5.5CVSS 3.1 base score
0.24%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://lists.debian.org/debian-lts-announce/2023/09/msg00026.html
https://sourceware.org/bugzilla/show_bug.cgi?id=25068 Issue Tracking
https://sourceware.org/git/?p=elfutils.git%3Ba=commitdiff%3Bh=99dc63b10b3878616b85df2dfd2e4e7103e414b8
https://lists.debian.org/debian-lts-announce/2023/09/msg00026.html
https://sourceware.org/bugzilla/show_bug.cgi?id=25068 Issue Tracking
https://sourceware.org/git/?p=elfutils.git%3Ba=commitdiff%3Bh=99dc63b10b3878616b85df2dfd2e4e7103e414b8

Track CVE-2020-21047 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-16402Elfutils project elfutils double free vulnerabilitylibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecif…EPSS 3.7%7.8CVE-2018-8769Elfutils project elfutils out-of-bounds read vulnerabilityelfutils 0.170 has a buffer over-read in the ebl_dynamic_tag_name function of libebl/ebldynamictagname.c because SYMTAB_SHNDX is unsupported.EPSS 0.84%6.8CVE-2014-0172Elfutils project elfutils vulnerabilityInteger overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows…EPSS 4.0%6.5CVE-2019-7148Elfutils project elfutils allocation without limits vulnerabilityAn attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers …EPSS 1.6%6.5CVE-2019-7149Elfutils project elfutils out-of-bounds read vulnerabilityA heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cau…EPSS 2.1%6.5CVE-2018-18520Elfutils project elfutils memory buffer overflow vulnerabilityAn Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar…EPSS 2.8%6.4CVE-2014-9447Elfutils project elfutils path traversal vulnerabilityDirectory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write …EPSS 5.0%5.5CVE-2021-33294Elfutils project elfutils vulnerabilityIn elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infini…EPSS 0.29%

Source: NIST National Vulnerability Database (record CVE-2020-21047), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.