GNU Vulnerabilities and Affected Products
Vulnerabilities associated with elfutils.
Products
Clear product- Binutils31 vulnerabilities
- grub213 vulnerabilities
- LibreDWG11 vulnerabilities
- PSPP8 vulnerabilities
- elfutils6 vulnerabilities
- Emacs6 vulnerabilities
- Bourne-Again Shell (Bash)5 vulnerabilities
- inetutils5 vulnerabilities
- gawk4 vulnerabilities
- gdb4 vulnerabilities
- cflow3 vulnerabilities
- cpio3 vulnerabilities
- glibc3 vulnerabilities
- GNU C Library (glibc)3 vulnerabilities
- GNU SASL3 vulnerabilities
- Mailman3 vulnerabilities
- Bison2 vulnerabilities
- coreutils2 vulnerabilities
- GCC2 vulnerabilities
- GnuPG2 vulnerabilities
- Guix2 vulnerabilities
- gzip2 vulnerabilities
- Libgcrypt2 vulnerabilities
- ncurses2 vulnerabilities
- patch2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-1377MEDIUM | GNU elfutils eu-strip strip.c gelf_getsymshndx denial of serviceA vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue. CWE-404Feb 17, 2025 | CVSS4.8v4.0 | EPSS0.319% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
GNU elfutils eu-strip elf_strptr.c elf_strptr denial of serviceA vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea9… CWE-404Feb 17, 2025 | CVSS2.0v4.0 | EPSS0.303% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2025-1372MEDIUM | GNU elfutils eu-readelf readelf.c print_string_section buffer overflowA vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix … | CVSS4.8v4.0 | EPSS0.343% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-1371MEDIUM | GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereferenceA vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue. | CVSS4.8v4.0 | EPSS0.227% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-1365MEDIUM | GNU elfutils eu-readelf readelf.c process_symtab buffer overflowA vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_symtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5e5c0394d82c53e97750fe7b18023e6f84157b81. It is recommended to apply a patch to fix this issue. | CVSS4.8v4.0 | EPSS0.339% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruptionA vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab2… CWE-119Feb 16, 2025 | CVSS2.3v4.0 | EPSS0.652% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |