PT-2025-6906
CVE-2025-1377
·
Published
2025-02-16
·
Updated
2026-08-25
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
GNU elfutils version 0.192
Description:
A problem has been found in GNU elfutils that affects the
gelf getsymshndx function of the file strip.c in the eu-strip component. This issue leads to denial of service and must be approached locally. The exploit has been disclosed and may be used.Recommendations:
To fix this issue, apply a patch with the identifier fbf1df9ca286de3323ae541973b08449f8d03aba to GNU elfutils version 0.192. As a temporary workaround, consider disabling the
gelf getsymshndx function until a patch is available.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾