CVE-2025-1376

LOW

elfutils 0.192 - Denial of Service in elf_strptr Function

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.295984
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.295984
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.497538
Exploit, Issue Tracking issue-tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=32672
Exploit, Issue Tracking issue-tracking patch
https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3
Product product
https://www.gnu.org/

Scores

CVSS v3 2.5
EPSS 0.0028
EPSS Percentile 19.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (2)
elfutils_project/elfutils 0.192
GNU/elfutils 0.192
Published Feb 17, 2025
Tracked Since Feb 18, 2026