CVE-2024-25260 — MEDIUM (4.0)

Vulnerability Description

elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

CVSS Score

4.0

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

LOW

Affected Products

Vendor	Product	Versions
Elfutils Project	Elfutils	0.189

Related Weaknesses (CWE)

CWE-476

References

https://github.com/schsiung/fuzzer_issues/issues/1ExploitIssue Tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=31058ExploitIssue Tracking
https://sourceware.org/elfutils/Product
https://github.com/schsiung/fuzzer_issues/issues/1ExploitIssue Tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=31058ExploitIssue Tracking
https://sourceware.org/elfutils/Product

FAQ

What is CVE-2024-25260?

CVE-2024-25260 is a vulnerability with a CVSS score of 4.0 (MEDIUM). elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

How severe is CVE-2024-25260?

CVE-2024-25260 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-25260?

Check the references section above for vendor advisories and patch information. Affected products include: Elfutils Project Elfutils.