The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due t…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Aug 22, 2023 · NIST NVD

   Detected

   The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.

2. Oct 14, 2026 · NIST NVD

   Updated

   The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.

Affected

• cpe elfutils project/elfutils0.177

Sources

• CVE.orgVulnerability recordCVE-2020-21047

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2020-21047

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2020-21047

  The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vul

  nvd.nist.gov

References

• Reference · cert-portal.siemens.com
• Reference · cert-portal.siemens.com
• Reference · lists.debian.org
• Issue Tracking · sourceware.org
• Reference · sourceware.org