CVE-2020-24826

EUVD-2020-17535 · Published Aug 4, 2021

A vulnerability in the elf::section::as_strtab function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.

Technologies

Libelfin_Project Libelfin

Weaknesses

CWE-74

CVSS scores

v3.15.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
v2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Stealth Defense Impairment

T1190Exploit Public-Facing Application T1027Obfuscated Files or Information T1574.006Dynamic Linker Hijacking T1574.007Path Interception by PATH Environment Variable T1690Prevent Command History Logging

References

https://github.com/aclements/libelfin/issues/49
https://github.com/xiaoxiongwang/function_bugs/tree/master/libelfin#segv-in-function-elfsectionas_strtab-at-elfelfcc284

Potentially impacted assets

See if this affects your attack surface