Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-72115
HistoryAug 05, 2021 - 12:00 a.m.

Libelfin buffer overflow vulnerability

2021-08-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

26.2%

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. libelfin has a buffer overflow vulnerability in v0.3, which stems from incorrect handling of the dwarf::cursor::skip_form function leading to a buffer overflow that can be exploited by an attacker via a crafted segmentation error in ELF files to cause a denial of service (DOS).

CPENameOperatorVersion
libelfin libelfin veq0.3

0.001 Low

EPSS

Percentile

26.2%