CVE-2020-24823
MEDIUMLibelfin v0.3 - Denial of Service via Crafted ELF File
Title source: llmDescription
A vulnerability in the dwarf::to_string function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/aclements/libelfin/issues/51
Exploit, Third Party Advisory x_refsource_misc
https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-dwarfto_string-at-dwarfvaluecc300
Scores
CVSS v3
5.5
EPSS
0.0072
EPSS Percentile
49.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-74
Status
published
Products (1)
libelfin_project/libelfin
0.3
Published
Aug 04, 2021
Tracked Since
Feb 18, 2026