CVE-2025-1352

EUVD-2025-2113

16.02.2025, 15:15

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 48.83%

Affected Products (NVD)

Vendor	Product	Version
elfutils_project	elfutils	0.192

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Siemens	RUGGEDCOM RST2428P	𝑥 < V4.0	ADP

Debian Releases

Debian Product

Codename

elfutils

bookworm	unimportant
bullseye	unimportant
forky	unimportant
sid	unimportant
trixie	unimportant

Ubuntu Releases

Ubuntu Product

Codename

elfutils

bionic	not-affected
focal	needed
jammy	needed
noble	needed
oracular	ignored
plucky	ignored
questing	ignored
resolute	needed
trusty	not-affected
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

elfutils

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

elfutils-lang

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libasm-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libasm1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw1-32bit

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf1-32bit

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

Amazon Linux Releases

Amazon Package

Release

elfutils

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-debuginfo

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-debuginfod

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-debuginfod-client

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-debuginfod-client-debuginfo

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-debuginfod-client-devel

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-debuginfod-debuginfo

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-debugsource

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-default-yama-scope

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-devel

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-libelf

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-libelf-debuginfo

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-libelf-devel

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-libs

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

elfutils-libs-debuginfo

Amazon Linux 2023

0:0.188-3.amzn2023.0.3

fixed

Azure Linux Releases

Azure Package

Release

elfutils

Azure Linux 3.0

0:0.189-5.azl3

fixed

Known Exploits!

https://sourceware.org/bugzilla/show_bug.cgi?id=32650

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

https://sourceware.org/bugzilla/attachment.cgi?id=15923

https://sourceware.org/bugzilla/show_bug.cgi?id=32650

https://sourceware.org/bugzilla/show_bug.cgi?id=32650#c2

https://vuldb.com/?ctiid.295960

https://vuldb.com/?id.295960

https://vuldb.com/?submit.495965

https://www.gnu.org/

https://cert-portal.siemens.com/productcert/html/ssa-253495.html