Known vulnerabilities in elfutils (Red Hat package)

Vendor: Red Hat Inc.
Software: elfutils (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:elfutils_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 20
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting elfutils (Red Hat package) elfutils (Red Hat package) is affected by 20 known vulnerabilities: 5 high, 5 medium, 10 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 0.186-1.el8 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU62002 - Improper input validation
CVE-2022-1271		 CWE-20 High
No
No
 0.186-1.el8 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 0.186-1.el8 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 0.186-1.el8 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61271 - Heap-based Buffer Overflow
CVE-2022-25636		 CWE-122 Low
Available
No
 0.186-1.el8 13.03.2022 SB2022031307
SB2022031308
SB2022031401
and 26 more
#VU61246 - Use After Free
CVE-2021-4083		 CWE-416 Low
No
No
 0.186-1.el8 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 55 more
#VU60797 - Use After Free
CVE-2021-4028		 CWE-416 Low
No
No
 0.186-1.el8 22.02.2022 SB2022022230
SB2022022231
SB2022022232
and 32 more
#VU60739 - Integer overflow
CVE-2022-25315		 CWE-190 High
No
No
 0.185-1.el8 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 0.185-1.el8 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 0.185-1.el8 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU17718 - Improper input validation
CVE-2019-7665		 CWE-20 Low
No
No
 0.176-2.el7 15.02.2019 SB2019013103
SB2019031807
SB2019110615
and 7 more
#VU17697 - Memory corruption
CVE-2019-7664		 CWE-119 Low
No
No
 0.176-2.el7 14.02.2019 SB2019013103
SB2019031807
SB2019110615
and 4 more
#VU17326 - Out-of-bounds read
CVE-2019-7149		 CWE-125 Low
No
No
 0.176-2.el7 31.01.2019 SB2019013103
SB2019031807
SB2019110615
and 6 more
#VU17325 - Improper input validation
CVE-2019-7150		 CWE-20 Low
No
No
 0.176-2.el7 31.01.2019 SB2019013103
SB2019031807
SB2019110615
and 7 more
#VU15528 - NULL Pointer Dereference
CVE-2018-18520		 CWE-476 Low
No
No
 0.176-2.el7 25.10.2018 SB2018102510
SB2018123005
SB2019010804
and 7 more
#VU15527 - Divide By Zero
CVE-2018-18521		 CWE-369 Low
No
No
 0.176-2.el7 25.10.2018 SB2018102510
SB2018123005
SB2019010804
and 7 more
#VU15371 - Improper input validation
CVE-2018-18310		 CWE-20 Low
No
No
 0.176-2.el7 15.10.2018 SB2018101605
SB2018123005
SB2019010804
and 8 more
#VU36733 - Double Free
CVE-2018-16402		 CWE-415 High
No
No
 0.172-4.el7_6, 0.176-2.el7 03.09.2018 SB2018090315
SB2019062013
SB2022080119
and 4 more
#VU36734 - Out-of-bounds read
CVE-2018-16403		 CWE-125 Medium
No
No
 0.176-2.el7 03.09.2018 SB2018090315
SB2019062013
SB2022080119
and 5 more
#VU31220 - Out-of-bounds read
CVE-2018-16062		 CWE-125 Medium
No
No
 0.176-2.el7 29.08.2018 SB2018082912
SB2019062013
SB2022080119
and 5 more