CVE-2024-25260

SOURCE - nist

Summary

elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

EPSS Score: 0.00045 (0.148)

Common Weakness Enumeration (CWE)

SOURCE - nist
SOURCE - redhat

Improper Restriction of Operations within the Bounds of a Memory Buffer


debian

CREATED


UPDATED



EXPLOITABILITY SCORE

-


EXPLOITS FOUND
-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow
PackageTypeOS NameOS VersionAffected RangesFix Versions
debian/elfutilsdebdebian12>=0.188-2.1Not yet available
debian/elfutilsdebdebian11>=0.183-1Not yet available
debian/elfutilsdebdebianunstable>=0.191-1Not yet available
debian/elfutilsdebdebian10>=0.176-1.1Not yet available
debian/elfutilsdebdebian13>=0.191-1Not yet available

Severity and metrics

No CVSS data available from this source.

nist

CREATED


UPDATED



EXPLOITABILITY SCORE

-


EXPLOITS FOUND
-

COMMON WEAKNESS ENUMERATION (CWE)
RATING UNAVAILABLE FROM SOURCE

ubuntu

CREATED


UPDATED



EXPLOITABILITY SCORE

-


EXPLOITS FOUND
-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

redhat

CREATED


UPDATED



EXPLOITABILITY SCORE

2.5


EXPLOITS FOUND
-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

5.1medium