CVE-2020-24821
MEDIUMlibelfin v0.3 - Denial of Service via Crafted ELF File in dwarf::cursor::skip_form
Title source: llmDescription
A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/aclements/libelfin/issues/52
Exploit, Third Party Advisory x_refsource_misc
https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-dwarfcursorskip_form-at-dwarfcursorcc191
Scores
CVSS v3
5.5
EPSS
0.0069
EPSS Percentile
48.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-74
Status
published
Products (1)
libelfin_project/libelfin
0.3
Published
Aug 04, 2021
Tracked Since
Feb 18, 2026