Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-25260

Fixed in a distro release EPSS <1%CVSS 4.0

elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

Published 2024-02-20 · CVE record · OSV

Products: elfutils_project elfutils

Distro releases

ReleasePackageFixed in
Debian 12elfutilsno fix
Debian 13elfutilsno fix
Debian 14elfutilsno fix
Ubuntu 22.04 LTSelfutils0.186-1ubuntu0.1
Ubuntu 24.04 LTSelfutils0.190-1.1ubuntu0.1