CVE-2020-21047

CVE-2020-21047 affects elfutils’ libcpu (used by libasm, elfutils 0.177, git 47780c9e). It enables a denial-of-service via an out-of-bounds write (CWE-787), off-by-one error (CWE-193), and reachable assertion (CWE-617). Exploitation requires crafting ELF files that bypass bound checks. The vulner...

CVE-2021-33294

The CVE-2021-33294 issue affects elfutils 0.183, with an infinite loop in handle_symtab (readelf.c) that allows a crafted file to trigger a denial of service. The Broadcom/IBM listings corroborate the infinite-loop DoS description. No public details on a fixed version are provided in the connecte...