CVE-2025-1371

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-1371
A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

1.7 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 3.1 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://sourceware.org/bugzilla/attachment.cgi?id=15926 Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=32655 Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=32655#c2 Broken Link
https://vuldb.com/?ctiid.295978 Permissions Required VDB Entry
https://vuldb.com/?id.295978 Third Party Advisory VDB Entry
https://vuldb.com/?submit.496484 Third Party Advisory VDB Entry
https://www.gnu.org/ Product
https://sourceware.org/bugzilla/show_bug.cgi?id=32655 Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:elfutils_project:elfutils:0.192:*:*:*:*:*:*:*
History

04 Nov 2025, 20:13

Type Values Removed Values Added
First Time Elfutils Project elfutils
Elfutils Project
CPE cpe:2.3:a:elfutils_project:elfutils:0.192:*:*:*:*:*:*:*
References () https://sourceware.org/bugzilla/attachment.cgi?id=15926 - () https://sourceware.org/bugzilla/attachment.cgi?id=15926 - Broken Link
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32655 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32655 - Broken Link
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32655#c2 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32655#c2 - Broken Link
References () https://vuldb.com/?ctiid.295978 - () https://vuldb.com/?ctiid.295978 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.295978 - () https://vuldb.com/?id.295978 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.496484 - () https://vuldb.com/?submit.496484 - Third Party Advisory, VDB Entry
References () https://www.gnu.org/ - () https://www.gnu.org/ - Product

18 Feb 2025, 20:15

Type Values Removed Values Added
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32655 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32655 -
Summary
  • (es) Se ha encontrado una vulnerabilidad en GNU elfutils 0.192 y se ha clasificado como problemática. Esta vulnerabilidad afecta a la función handle_dynamic_symtab del archivo readelf.c del componente eu-read. La manipulación provoca la desreferenciación de puntero nulo. Es necesario atacar de forma local. La vulnerabilidad se ha hecho pública y puede utilizarse. El parche se identifica como b38e562a4c907e08171c76b8b2def8464d5a104a. Se recomienda aplicar un parche para solucionar este problema.

17 Feb 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-17 03:15

Updated : 2025-11-04 20:13

NVD link : CVE-2025-1371

Mitre link : CVE-2025-1371

CVE.ORG link : CVE-2025-1371

JSON object : View

Products Affected

elfutils_project

  • elfutils
CWE
CWE-404

Improper Resource Shutdown or Release

CWE-476

NULL Pointer Dereference