4.8
Medium
CVE-2025-1371 A vulnerability has been found in GNU elfutils 0.192 and classified as problematic
Description
A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| elfutils | 0.192 | No fix stated |
References
- VDB-295978 | GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference vuldb.com
- VDB-295978 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #496484 | GNU elfutils/eu-readelf 0.192 Buffer Over-read vuldb.com
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- www.gnu.org www.gnu.org
Timeline
- Published
- Last modified
Other CVEs of elfutils
The 6 CVEs of elfutils →
CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192
4.8
Medium
CVE-2025-1376
A vulnerability classified as problematic was found in GNU elfutils 0.192
2.0
Low
CVE-2025-1372
A vulnerability was found in GNU elfutils 0.192
4.8
Medium
CVE-2025-1365
A vulnerability, which was classified as critical, was found in GNU elfutils 0.192
4.8
Medium