CVE Database›Document archive›CVE-2021-33294

CVE-2021-33294

elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service

Loading…

Severity

Moderate

Red Hat Product Security

6.2

CVSS 3.1

Review impact separately from score.

Published · July 18, 2023

Updated · January 23, 2026

Description

A flaw was found in the elfutils tools package. An infinite loop is possible in the handle_symtab function in readelf.c, which may lead to a denial of service.

A vulnerability was found in Elfutils, where an infinite loop in the handle_symtab function within readelf.c can lead to a denial of service, causing the application to become unresponsive and consume excessive system resources indefinitely.

Statement

This vulnerability is rated as moderate because an infinite loop in Elfutils' handle_symtab function within readelf.c could lead to a denial of service, it does not lead to code execution but it can cause prolonged application unresponsiveness, impacting availability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 · Uncontrolled Resource Consumption