In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file.(CVE-2021-33294)

Tenable has extracted the preceding description block directly from the EulerOS elfutils security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the elfutils package has been released.

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the elfutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6322-1 advisory.

    It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system     were tricked into processing a specially crafted file, elfutils could be made to crash or consume     resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2018-16062,     CVE-2018-16403, CVE-2018-18310, CVE-2018-18520, CVE-2018-18521, CVE-2019-7149, CVE-2019-7150,     CVE-2019-7665)

    It was discovered that elfutils incorrectly handled bounds checks in certain functions when processing     malformed files. If a user or automated system were tricked into processing a specially crafted file,     elfutils could be made to crash or consume resources, resulting in a denial of service. (CVE-2020-21047,     CVE-2021-33294)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of elfutils installed on the remote host is prior to 0.176-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2197 advisory.

    In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows     attackers to cause a denial of service (infinite loop) via crafted file. (CVE-2021-33294)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
504034	Siemens SIMATIC S7-1500 Loop with Unreachable Exit Condition (CVE-2021-33294)	Tenable OT Security	Tenable.ot	medium
223879	Linux Distros Unpatched Vulnerability : CVE-2021-33294	Nessus	Misc.	medium
207197	EulerOS 2.0 SP9 : elfutils (EulerOS-SA-2024-2361)	Nessus	Huawei Local Security Checks	medium
207161	EulerOS 2.0 SP9 : elfutils (EulerOS-SA-2024-2386)	Nessus	Huawei Local Security Checks	medium
204650	Photon OS 3.0: Elfutils PHSA-2023-3.0-0643	Nessus	PhotonOS Local Security Checks	medium
204576	Photon OS 4.0: Elfutils PHSA-2023-4.0-0452	Nessus	PhotonOS Local Security Checks	medium
188549	EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2023-3170)	Nessus	Huawei Local Security Checks	medium
188429	EulerOS Virtualization 2.10.0 : elfutils (EulerOS-SA-2023-3466)	Nessus	Huawei Local Security Checks	medium
188327	EulerOS Virtualization 2.10.1 : elfutils (EulerOS-SA-2023-3494)	Nessus	Huawei Local Security Checks	medium
188117	EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2023-3205)	Nessus	Huawei Local Security Checks	medium
180321	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : elfutils vulnerabilities (USN-6322-1)	Nessus	Ubuntu Local Security Checks	medium
179778	Amazon Linux 2 : elfutils (ALAS-2023-2197)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2021-33294

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium