CVE-2025-1376: Denial of Service in GNU elfutils
CVE-2025-1376 is a denial of service vulnerability found in GNU elfutils version 0. 192, specifically in the elf_strptr function within the eu-strip component. The vulnerability can be exploited locally with high attack complexity and does not require user interaction. A patch identified by commit b16f441cca0a4841050e3215a9f120a6d8aea918 is recommended to fix the issue. The CVSS 4. 0 score rates this vulnerability as low severity. Exploitation is difficult and no known exploits are reported in the wild.
AI Analysis
Technical Summary
This vulnerability affects the elf_strptr function in the /libelf/elf_strptr.c file of the eu-strip component in GNU elfutils 0.192. It allows a local attacker with limited privileges to cause a denial of service by manipulating the function. The attack complexity is high, and no user interaction or privileges beyond limited are required. The vulnerability has been publicly disclosed, and a patch is available under commit b16f441cca0a4841050e3215a9f120a6d8aea918.
Potential Impact
The impact is a denial of service condition on the local host, potentially causing the affected process or system component to crash or become unresponsive. The severity is low according to the CVSS 4.0 score of 2. There are no reports of exploitation in the wild.
Mitigation Recommendations
A patch identified by commit b16f441cca0a4841050e3215a9f120a6d8aea918 is available and it is recommended to apply this patch to remediate the vulnerability. Patch status is confirmed by the presence of the patch commit reference. No additional mitigations are indicated.
CVE-2025-1376: Denial of Service in GNU elfutils
Description
CVE-2025-1376 is a denial of service vulnerability found in GNU elfutils version 0. 192, specifically in the elf_strptr function within the eu-strip component. The vulnerability can be exploited locally with high attack complexity and does not require user interaction. A patch identified by commit b16f441cca0a4841050e3215a9f120a6d8aea918 is recommended to fix the issue. The CVSS 4. 0 score rates this vulnerability as low severity. Exploitation is difficult and no known exploits are reported in the wild.
CVSS v4.0
Score 2.0low
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the elf_strptr function in the /libelf/elf_strptr.c file of the eu-strip component in GNU elfutils 0.192. It allows a local attacker with limited privileges to cause a denial of service by manipulating the function. The attack complexity is high, and no user interaction or privileges beyond limited are required. The vulnerability has been publicly disclosed, and a patch is available under commit b16f441cca0a4841050e3215a9f120a6d8aea918.
Potential Impact
The impact is a denial of service condition on the local host, potentially causing the affected process or system component to crash or become unresponsive. The severity is low according to the CVSS 4.0 score of 2. There are no reports of exploitation in the wild.
Mitigation Recommendations
A patch identified by commit b16f441cca0a4841050e3215a9f120a6d8aea918 is available and it is recommended to apply this patch to remediate the vulnerability. Patch status is confirmed by the presence of the patch commit reference. No additional mitigations are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-02-16T19:52:48.908Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1ee64fe29bf47b50d3a8da
Added to database: 6/2/2026, 2:18:55 PM
Last enriched: 6/2/2026, 2:35:38 PM
Last updated: 6/2/2026, 5:23:03 PM
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.