Skip to content
Fencer Vulns
low 3.3

CVE-2025-1377 json

GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service

published 2025-02-17 20 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-2134

cvss
3.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 25%
public exploits
0
none known

Summary

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.

Patch / fix

  • elfutils Ubuntu 22.04 LTS 0.186-1ubuntu0.1
  • elfutils Ubuntu 24.04 LTS 0.190-1.1ubuntu0.1

ubuntu advisories UBUNTU-CVE-2025-1377

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • elfutils SLE Module for Basesystem 15 SP7, SLE Module for Basesystem 15 SP6, SLE Micro 5.5 +13 more 0.185-150400.5.8.3
  • elfutils-debuginfod SLE Module for Basesystem 15 SP7, SLE Module for Basesystem 15 SP6, SLE High Performance Computing 15 SP5-ESPOS +10 more 0.185-150400.5.8.2

suse advisories SUSE-RU-2025:4092-1SUSE-SU-2025:4092-1

  • elfutils Azure Linux 3.0 0.189-4

azure linux advisories AZL-56980

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-1377 updated cvss 3.3

elfutils: GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service

  • Red Hat Enterprise Linux 9 elfutils, elfutils-libs, elfutils-libelf, elfutils-debuginfod, elfutils-debuginfod-client, elfutils-default-yama-scope Red Hat Enterprise Linux 10 elfutils
    affected: workaround, no fix available “Fix deferred”
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-dashboard-rhel9
    under investigation
  • Red Hat Enterprise Linux 6 elfutils, elfutils-libs, elfutils-libelf Red Hat Enterprise Linux 7 elfutils, elfutils-libs, elfutils-libelf, elfutils-default-yama-scope Red Hat Enterprise Linux 8 elfutils, elfutils-libs, elfutils-libelf, elfutils-default-yama-scope Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
20 mo ago

Exploit prediction

0.33% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • sourceware.org https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2 referenced PoC, tagged "exploit" by a source, unverified
  • sourceware.org https://sourceware.org/bugzilla/attachment.cgi?id=15941 referenced PoC, tagged "exploit" by a source, unverified
  • sourceware.org https://sourceware.org/bugzilla/show_bug.cgi?id=32673 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 4.0 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CNA 3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CNA 3.0 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CNA 2.0 1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P
CNA 4.0 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

  • GNU elfutils

Classification

Weakness
  • CWE-404 Improper Resource Shutdown or Release

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.