CVE-2020-21047
22.08.2023, 19:16
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| elfutils_project | elfutils | 0.177 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.0 ≤ 𝑥 < V3.1.5 | ADP |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.0 ≤ 𝑥 < V3.1.5 | ADP |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.0 ≤ 𝑥 < V3.1.5 | ADP |
| Siemens | RUGGEDCOM ROX MX5000 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX MX5000RE | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1400 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1500 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1501 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1510 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1511 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1512 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1524 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX1536 | 𝑥 < V2.17.0 | ADP |
| Siemens | RUGGEDCOM ROX RX5000 | 𝑥 < V2.17.0 | ADP |
Debian Releases
Ubuntu Releases
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| elfutils |
| ||
| elfutils-debuginfo |
| ||
| elfutils-default-yama-scope |
| ||
| elfutils-devel |
| ||
| elfutils-devel-static |
| ||
| elfutils-libelf |
| ||
| elfutils-libelf-devel |
| ||
| elfutils-libelf-devel-static |
| ||
| elfutils-libs |
|
Common Weakness Enumeration
References