CVE-2025-1376
GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
CVSS Score
2.5
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.
| CWE | CWE-404 |
| Vendor | gnu |
| Product | elfutils |
| Published | Feb 17, 2025 |
| Last Updated | Jun 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for gnu elfutils
Be the first to know when new low vulnerabilities affecting gnu elfutils are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
GNU / elfutils
0.192
References
vuldb.com: https://vuldb.com/?id.295984 vuldb.com: https://vuldb.com/?ctiid.295984 vuldb.com: https://vuldb.com/?submit.497538 sourceware.org: https://sourceware.org/bugzilla/show_bug.cgi?id=32672 sourceware.org: https://sourceware.org/bugzilla/attachment.cgi?id=15940 sourceware.org: https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3 gnu.org: https://www.gnu.org/ cert-portal.siemens.com: https://cert-portal.siemens.com/productcert/html/ssa-253495.html
Credits
🔍 wenjusun (VulDB User)