CVE-2025-1376: Denial of Service in GNU elfutils
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.
AI Analysis
Technical Summary
This vulnerability affects the elf_strptr function in the /libelf/elf_strptr.c file of the eu-strip component in GNU elfutils 0.192. It allows a local attacker with limited privileges to cause a denial of service by manipulating the function. The attack complexity is high, and no user interaction or privileges beyond limited are required. The vulnerability has been publicly disclosed, and a patch is available under commit b16f441cca0a4841050e3215a9f120a6d8aea918.
Potential Impact
The impact is a denial of service condition on the local host, potentially causing the affected process or system component to crash or become unresponsive. The severity is low according to the CVSS 4.0 score of 2. There are no reports of exploitation in the wild.
Mitigation Recommendations
A patch identified by commit b16f441cca0a4841050e3215a9f120a6d8aea918 is available and it is recommended to apply this patch to remediate the vulnerability. Patch status is confirmed by the presence of the patch commit reference. No additional mitigations are indicated.
CVE-2025-1376: Denial of Service in GNU elfutils
Description
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.
CVSS v4.0
Score 2.0low
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the elf_strptr function in the /libelf/elf_strptr.c file of the eu-strip component in GNU elfutils 0.192. It allows a local attacker with limited privileges to cause a denial of service by manipulating the function. The attack complexity is high, and no user interaction or privileges beyond limited are required. The vulnerability has been publicly disclosed, and a patch is available under commit b16f441cca0a4841050e3215a9f120a6d8aea918.
Potential Impact
The impact is a denial of service condition on the local host, potentially causing the affected process or system component to crash or become unresponsive. The severity is low according to the CVSS 4.0 score of 2. There are no reports of exploitation in the wild.
Mitigation Recommendations
A patch identified by commit b16f441cca0a4841050e3215a9f120a6d8aea918 is available and it is recommended to apply this patch to remediate the vulnerability. Patch status is confirmed by the presence of the patch commit reference. No additional mitigations are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-02-16T19:52:48.908Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a1ee64fe29bf47b50d3a8da
Added to database: 06/02/2026, 14:18:55 UTC
Last enriched: 06/02/2026, 14:35:38 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.