CVE-2021-33294
elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 18, 2023
Updated · January 23, 2026
Description
A flaw was found in the elfutils tools package. An infinite loop is possible in the handle_symtab function in readelf.c, which may lead to a denial of service.
A vulnerability was found in Elfutils, where an infinite loop in the handle_symtab function within readelf.c can lead to a denial of service, causing the application to become unresponsive and consume excessive system resources indefinitely.
Statement
This vulnerability is rated as moderate because an infinite loop in Elfutils' handle_symtab function within readelf.c could lead to a denial of service, it does not lead to code execution but it can cause prolonged application unresponsiveness, impacting availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption