CVE-2025-1376

EUVD-2025-2133

17.02.2025, 05:15

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	2.5 LOW	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 1%

Affected Products (NVD)

Vendor	Product	Version
elfutils_project	elfutils	0.192

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Siemens	RUGGEDCOM RST2428P	𝑥 < V4.0	ADP

openSUSE / SLES Releases

openSUSE Product

Release

elfutils

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

elfutils-lang

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libasm-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libasm1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw1-32bit

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf1-32bit

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

Known Exploits!

Common Weakness Enumeration

CWE-404 - Improper Resource Shutdown or Release
The program does not release or incorrectly releases a resource before it is made available for re-use.

References

https://sourceware.org/bugzilla/attachment.cgi?id=15940

https://sourceware.org/bugzilla/show_bug.cgi?id=32672

https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3

https://vuldb.com/?ctiid.295984

https://vuldb.com/?id.295984

https://vuldb.com/?submit.497538

https://www.gnu.org/

https://cert-portal.siemens.com/productcert/html/ssa-253495.html