2.0
Low
CVE-2025-1376 A vulnerability classified as problematic was found in GNU elfutils 0.192
Description
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| elfutils | 0.192 | No fix stated |
| RUGGEDCOM RST2428P 4.0 | earliest → < 4.0 | 4.0 |
References
- VDB-295984 | GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service vuldb.com
- VDB-295984 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #497538 | GNU elfutils/eu-strip 0.192 illegal read access vuldb.com
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- www.gnu.org www.gnu.org
Timeline
- Published
- Last modified
Other CVEs of elfutils
The 6 CVEs of elfutils →
CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192
4.8
Medium
CVE-2025-1372
A vulnerability was found in GNU elfutils 0.192
4.8
Medium
CVE-2025-1371
A vulnerability has been found in GNU elfutils 0.192 and classified as problematic
4.8
Medium
CVE-2025-1365
A vulnerability, which was classified as critical, was found in GNU elfutils 0.192
4.8
Medium