Vulnerability-Lookup

CVE-2021-33294 (GCVE-0-2021-33294)

Vulnerability from cvelistv5 – Published: 2023-07-18 00:00 – Updated: 2026-10-14 11:39

Summary

In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

Severity

No CVSS data available.

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-28 17:05 UTC

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2316 records in the last 180 days details

References

3 references

URL	Tags
https://sourceware.org/bugzilla/show_bug.cgi?id=27501
https://sourceware.org/pipermail/elfutils-devel/2…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version	CPE status
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)	guessed
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)	guessed
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:42:20.323Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27501"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-33294",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-28T17:05:21.199995Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-28T17:05:29.444Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T11:39:38.003Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-18T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27501"
        },
        {
          "url": "https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-33294",
    "datePublished": "2023-07-18T00:00:00.000Z",
    "dateReserved": "2021-05-20T00:00:00.000Z",
    "dateUpdated": "2026-10-14T11:39:38.003Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-33294",
      "date": "2026-10-14",
      "epss": "0.00292",
      "percentile": "0.20256"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "cve@mitre.org"
          },
          {
            "affectedData": [
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:elfutils_project:elfutils:0.183:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C0F8466-BE5B-45B1-A099-2B1E940E5A8E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file."
          }
        ],
        "id": "CVE-2021-33294",
        "lastModified": "2026-10-14T12:17:12.097",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2021-33294",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-28T17:05:21.199995Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2023-07-18T14:15:11.673",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Issue Tracking"
            ],
            "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27501"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Patch"
            ],
            "url": "https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Issue Tracking"
            ],
            "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27501"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch"
            ],
            "url": "https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html"
          },
          {
            "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-835"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-01-22T18:51:57+00:00",
      "cve": "CVE-2021-33294",
      "id": "CVE-2021-33294",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_affected": "17",
      "product_status:known_not_affected": "28",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-33294.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T23:42:20.323Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27501"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V3.1.5",
                    "status": "affected",
                    "version": "V3.1.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-14T11:39:38.003Z",
              "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
              "shortName": "siemens-SADP"
            },
            "references": [
              {
                "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html"
              }
            ],
            "x_adpType": "supplier"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2021-33294",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-10-28T17:05:21.199995Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-10-28T17:05:25.474Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-07-18T00:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27501"
            },
            {
              "url": "https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2021-33294",
        "datePublished": "2023-07-18T00:00:00.000Z",
        "dateReserved": "2021-05-20T00:00:00.000Z",
        "dateUpdated": "2026-10-14T11:39:38.003Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

OESA-2023-1445 (CVE-2021-33294)

Vulnerability from osv_openeuler – Published: 2023-07-29 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

elfutils security update

Details

Elfutils is a collection of utilities, including stack (to show backtraces), nm (for listing symbols from object files), size (for listing the section sizes of an object or archive file), strip (for discarding symbols), elflint (to check for well-formed ELF files) and elfcompress (to compress or decompress ELF sections). Also included are helper libraries which implement DWARF, ELF, and machine-specific ELF handling and process introspection. It also provides a DSO which allows reading and writing ELF files on a high level. Third party programs depend on this package to read internals of ELF files. Yama sysctl setting to enable default attach scope settings enabling programs to use ptrace attach, access to /proc/PID/{mem,personality,stack,syscall}, and the syscalls process_vm_readv and process_vm_writev which are used for interprocess services, communication and introspection (like synchronisation, signaling, debugging, tracing and profiling) of processes.

Security Fix(es):

In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.(CVE-2021-33294)

Severity

2.5 (Low)


                    
                      CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2021-33294	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "elfutils-debuginfod-client-devel-0.180-14.oe1.aarch64.rpm",
          "elfutils-debugsource-0.180-14.oe1.aarch64.rpm",
          "elfutils-0.180-14.oe1.aarch64.rpm",
          "elfutils-debuginfo-0.180-14.oe1.aarch64.rpm",
          "elfutils-devel-0.180-14.oe1.aarch64.rpm",
          "elfutils-libelf-devel-0.180-14.oe1.aarch64.rpm",
          "elfutils-libelf-0.180-14.oe1.aarch64.rpm",
          "elfutils-libs-0.180-14.oe1.aarch64.rpm",
          "elfutils-help-0.180-14.oe1.aarch64.rpm",
          "elfutils-debuginfod-client-0.180-14.oe1.aarch64.rpm",
          "elfutils-debuginfod-0.180-14.oe1.aarch64.rpm"
        ],
        "noarch": [
          "elfutils-default-yama-scope-0.180-14.oe1.noarch.rpm"
        ],
        "src": [
          "elfutils-0.180-14.oe1.src.rpm"
        ],
        "x86_64": [
          "elfutils-libelf-0.180-14.oe1.x86_64.rpm",
          "elfutils-libelf-devel-0.180-14.oe1.x86_64.rpm",
          "elfutils-debuginfod-client-devel-0.180-14.oe1.x86_64.rpm",
          "elfutils-debugsource-0.180-14.oe1.x86_64.rpm",
          "elfutils-debuginfod-0.180-14.oe1.x86_64.rpm",
          "elfutils-help-0.180-14.oe1.x86_64.rpm",
          "elfutils-devel-0.180-14.oe1.x86_64.rpm",
          "elfutils-0.180-14.oe1.x86_64.rpm",
          "elfutils-libs-0.180-14.oe1.x86_64.rpm",
          "elfutils-debuginfo-0.180-14.oe1.x86_64.rpm",
          "elfutils-debuginfod-client-0.180-14.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "elfutils",
        "purl": "pkg:rpm/openEuler/elfutils\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.180-14.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Low"
  },
  "details": "Elfutils is a collection of utilities, including stack (to show backtraces), nm (for listing symbols from object files), size (for listing the section sizes of an object or archive file), strip (for discarding symbols), elflint (to check for well-formed ELF files) and elfcompress (to compress or decompress ELF sections). Also included are helper libraries which implement DWARF, ELF, and machine-specific ELF handling and process introspection. It also provides a DSO which allows reading and writing ELF files on a high level. Third party programs depend on this package to read internals of ELF files. Yama sysctl setting to enable default attach scope settings enabling programs to use ptrace attach, access to /proc/PID/{mem,personality,stack,syscall}, and the syscalls process_vm_readv and process_vm_writev which are used for interprocess services, communication and introspection (like synchronisation, signaling, debugging, tracing and profiling) of processes.\n\nSecurity Fix(es):\n\nIn elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.(CVE-2021-33294)",
  "id": "OESA-2023-1445",
  "modified": "2026-08-06T11:05:54Z",
  "published": "2023-07-29T11:05:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1445"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33294"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "elfutils security update",
  "upstream": [
    "CVE-2021-33294"
  ]
}

SSA-398330

Vulnerability from csaf_siemens - Published: 2023-12-12 00:00 - Updated: 2026-10-13 00:00

Summary

SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5

Scope

544 vulnerabilities in this advisory, including CVE-2021-33294.

CVE-2021-33294

In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Known affected: 5 products

https://support.industry.siemens.com/cs/ww/en/view/109478459/

Open the full advisory

UBUNTU-CVE-2021-33294 (CVE-2021-33294)

Vulnerability from osv_ubuntu – Published: 2023-07-18 14:15 – Updated: 2026-04-22 07:40 – Source website

Details

In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.

Severity

5.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2021-33294	REPORT
	https://sourceware.org/pipermail/elfutils-devel/2…	REPORT
	https://sourceware.org/bugzilla/show_bug.cgi?id=27501	REPORT
	https://ubuntu.com/security/notices/USN-6322-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2021-33294	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "elfutils",
            "binary_version": "0.158-0ubuntu5.3+esm1"
          },
          {
            "binary_name": "libasm1",
            "binary_version": "0.158-0ubuntu5.3+esm1"
          },
          {
            "binary_name": "libdw1",
            "binary_version": "0.158-0ubuntu5.3+esm1"
          },
          {
            "binary_name": "libelf1",
            "binary_version": "0.158-0ubuntu5.3+esm1"
          }
        ],
        "priority_reason": "No real security impact as this is a command-line utility that is not generally expected to handle untrusted input."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "elfutils",
        "purl": "pkg:deb/ubuntu/elfutils@0.158-0ubuntu5.3+esm1?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.158-0ubuntu5.3+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.157-1ubuntu1",
        "0.158-0ubuntu3",
        "0.158-0ubuntu4",
        "0.158-0ubuntu5",
        "0.158-0ubuntu5.1",
        "0.158-0ubuntu5.2",
        "0.158-0ubuntu5.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "elfutils",
            "binary_version": "0.165-3ubuntu1.2+esm1"
          },
          {
            "binary_name": "libasm1",
            "binary_version": "0.165-3ubuntu1.2+esm1"
          },
          {
            "binary_name": "libdw1",
            "binary_version": "0.165-3ubuntu1.2+esm1"
          },
          {
            "binary_name": "libelf1",
            "binary_version": "0.165-3ubuntu1.2+esm1"
          }
        ],
        "priority_reason": "No real security impact as this is a command-line utility that is not generally expected to handle untrusted input."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "elfutils",
        "purl": "pkg:deb/ubuntu/elfutils@0.165-3ubuntu1.2+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.165-3ubuntu1.2+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.163-4ubuntu1",
        "0.163-5.1",
        "0.164-1",
        "0.165-3",
        "0.165-3ubuntu1",
        "0.165-3ubuntu1.1",
        "0.165-3ubuntu1.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "elfutils",
            "binary_version": "0.170-0.4ubuntu0.1+esm1"
          },
          {
            "binary_name": "libasm1",
            "binary_version": "0.170-0.4ubuntu0.1+esm1"
          },
          {
            "binary_name": "libdw1",
            "binary_version": "0.170-0.4ubuntu0.1+esm1"
          },
          {
            "binary_name": "libelf1",
            "binary_version": "0.170-0.4ubuntu0.1+esm1"
          }
        ],
        "priority_reason": "No real security impact as this is a command-line utility that is not generally expected to handle untrusted input."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "elfutils",
        "purl": "pkg:deb/ubuntu/elfutils@0.170-0.4ubuntu0.1+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.170-0.4ubuntu0.1+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.170-0.1",
        "0.170-0.2",
        "0.170-0.3",
        "0.170-0.4",
        "0.170-0.4ubuntu0.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "elfutils",
            "binary_version": "0.176-1.1ubuntu0.1"
          },
          {
            "binary_name": "libasm1",
            "binary_version": "0.176-1.1ubuntu0.1"
          },
          {
            "binary_name": "libdw1",
            "binary_version": "0.176-1.1ubuntu0.1"
          },
          {
            "binary_name": "libelf1",
            "binary_version": "0.176-1.1ubuntu0.1"
          }
        ],
        "priority_reason": "No real security impact as this is a command-line utility that is not generally expected to handle untrusted input."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "elfutils",
        "purl": "pkg:deb/ubuntu/elfutils@0.176-1.1ubuntu0.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.176-1.1ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.176-1.1",
        "0.176-1.1build1"
      ]
    }
  ],
  "aliases": [],
  "details": "In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.",
  "id": "UBUNTU-CVE-2021-33294",
  "modified": "2026-04-22T07:40:04Z",
  "published": "2023-07-18T14:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-33294"
    },
    {
      "type": "REPORT",
      "url": "https://sourceware.org/pipermail/elfutils-devel/2021q1/003607.html"
    },
    {
      "type": "REPORT",
      "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27501"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6322-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33294"
    }
  ],
  "related": [
    "USN-6322-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2021-33294"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2021-33294 (GCVE-0-2021-33294)

OESA-2023-1445 (CVE-2021-33294)

SSA-398330

UBUNTU-CVE-2021-33294 (CVE-2021-33294)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour