Vulnerability in Elfutils Project
CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.
EPSS: 0.003 (24.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Elfutils_project Elfutils — versions 0.192
- Gnu Elfutils — versions 0.192
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, VDB Entry, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, Permissions Required, permissions-required, VDB Entry)
- cna@vuldb.com (VDB Entry, Third Party Advisory, third-party-advisory)
- cna@vuldb.com (issue-tracking, Exploit, Issue Tracking)
- cna@vuldb.com (Exploit, exploit)
- cna@vuldb.com (issue-tracking, Exploit, patch, Issue Tracking)
- cna@vuldb.com (Product, product)
Frequently asked questions
- What is CVE-2025-1377?
- CVE-2025-1377 is a low-severity vulnerability in Elfutils Project, classified under Improper Resource Shutdown or Release. CVSS score: 3.3/10. Published 2025-02-17.
- How severe is CVE-2025-1377?
- Low severity. CVSS v3 base score is 3.3 out of 10.