CVE-2025-1377

EUVD-2025-2134

17.02.2025, 05:15

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.3 LOW	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 1%

Affected Products (NVD)

Vendor	Product	Version
elfutils_project	elfutils	0.192

𝑥

= Vulnerable software versions

openSUSE / SLES Releases

openSUSE Product

Release

elfutils

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

elfutils-lang

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libasm-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libasm1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libdw1-32bit

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf-devel

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf1

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

libelf1-32bit

suse enterprise desktop 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise desktop 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise sap 15 SP7	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP4	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP5	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP6	0.185-150400.5.8.3 fixed
suse enterprise server 15 SP7	0.185-150400.5.8.3 fixed

Known Exploits!

Common Weakness Enumeration

CWE-404 - Improper Resource Shutdown or Release
The program does not release or incorrectly releases a resource before it is made available for re-use.

References

https://sourceware.org/bugzilla/attachment.cgi?id=15941

https://sourceware.org/bugzilla/show_bug.cgi?id=32673

https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2

https://vuldb.com/?ctiid.295985

https://vuldb.com/?id.295985

https://vuldb.com/?submit.497539

https://www.gnu.org/