CVE-2025-1377

LOW

elfutils 0.192 - Denial of Service in gelf_getsymshndx Function

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.295985
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.295985
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.497539
Exploit, Issue Tracking issue-tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=32673
Exploit, Issue Tracking issue-tracking patch
https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2
Product product
https://www.gnu.org/

Scores

CVSS v3 3.3
EPSS 0.0030
EPSS Percentile 21.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (1)
elfutils_project/elfutils 0.192
Published Feb 17, 2025
Tracked Since Feb 18, 2026