{"id":"CVE-2024-25260","aliases":["AZL-38203","BELL-CVE-2024-25260","CLSA-2026-1787242456","DEBIAN-CVE-2024-25260","EUVD-2024-22596","GHSA-c5x5-p58w-fxgh","MGASA-2025-0119","ROOT-OS-DEBIAN-12-CVE-2024-25260","UBUNTU-CVE-2024-25260","USN-7369-1"],"status":"published","title":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef()...","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00307,"percentile":0.2374,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2024-02-20T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"elfutils","fixed_in":["0.189-6"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"elfutils","fixed_in":["0.191-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"elfutils","fixed_in":["0.191-r0"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"elfutils","fixed_in":["0.188-2.1.root.io.9","0.188-2.1.aikido.10"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-elfutils","fixed_in":["0.188-2.1.root.io.9","0.188-2.1.aikido.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"elfutils","fixed_in":["0.190-1.1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.189-6"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.187-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.187-r1"},{"fixed":"0.191-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.187-r1"},{"fixed":"0.191-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-debuginfod-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-debuginfod-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-default-yama-scope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-libelf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-libelf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"elfutils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-3.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.188-2.1","0.189-1","0.189-2","0.189-3","0.189-4","0.190-1","0.190-1.1","0.190-1.1~exp1","0.191-1","0.191-1~bpo12+1","0.191-2","0.192-1","0.192-2","0.192-3","0.192-4","0.192-4~bpo12+1","0.193-1","0.193-2","0.193-3","0.193-3~bpo13+1","0.194+20260315-1","0.194-1","0.194-2","0.194-3","0.194-4","0.195-1","0.195-1~bpo13+1","0.196-1","0.196-1~bpo13+1","0.196-1~bpo13+2"]},{"source":"osv","ecosystem":"Debian:13","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.192-4","0.193-1","0.193-2","0.193-3","0.193-3~bpo13+1","0.194+20260315-1","0.194-1","0.194-2","0.194-3","0.194-4","0.195-1","0.195-1~bpo13+1","0.196-1","0.196-1~bpo13+1","0.196-1~bpo13+2"]},{"source":"osv","ecosystem":"Debian:14","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.192-4","0.193-1","0.193-2","0.193-3","0.193-3~bpo13+1","0.194+20260315-1","0.194-1","0.194-2","0.194-3","0.194-4","0.195-1","0.195-1~bpo13+1","0.196-1","0.196-1~bpo13+1","0.196-1~bpo13+2"]},{"source":"osv","ecosystem":"Mageia:9","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.189-1.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Root:Debian:12","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-2.1.root.io.9"},{"fixed":"0.188-2.1.aikido.10"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-2.1.root.io.9"},{"fixed":"0.188-2.1.aikido.10"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.190-1.1ubuntu0.1"}]}],"versions":["0.189-4","0.190-1","0.190-1.1build2","0.190-1.1build3","0.190-1.1build4","0.190-1.1build4.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.186-1ubuntu0.1"}]}],"versions":["0.185-1build1","0.185-2","0.186-1","0.186-1build1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.190-1.1ubuntu0.1"}]}],"versions":["0.189-4","0.190-1","0.190-1.1build2","0.190-1.1build3","0.190-1.1build4","0.190-1.1build4.1"],"bundled":5}],"products":[{"vendor":"elfutils_project","product":"elfutils"}],"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=31058","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://github.com/schsiung/fuzzer_issues/issues/1","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://sourceware.org/elfutils/","tags":["x_transferred","Product","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25260","tags":["web","advisory"]},{"url":"https://sourceware.org/elfutils"},{"url":"https://github.com/advisories/GHSA-c5x5-p58w-fxgh"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-25260","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787242456.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1376","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1377","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25260.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-25260","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0119.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34134","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7369-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-25260","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1377","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-25260","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T00:00:00Z","modified":"2025-04-24T15:07:14.701Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:34:04.341725Z"}],"euvd":[{"id":"EUVD-2024-22596","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T00:00:00Z","modified":"2025-04-24T15:07:14Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:04.724433Z"}],"ghsa":[{"id":"GHSA-c5x5-p58w-fxgh","title":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef()...","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T18:30:35Z","modified":"2024-08-01T15:32:30Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:57:47.54071Z"}],"nvd":[{"id":"CVE-2024-25260","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T18:15:52.88Z","modified":"2026-06-17T07:15:47.303Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:09:37.655131Z"}],"osv":[{"id":"BELL-CVE-2024-25260","status":"published","published":"2024-02-21T05:56:22.228662Z","modified":"2026-01-26T09:36:02.156368Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2024-25260","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T00:00:00Z","modified":"2026-10-28T02:30:32.816712626Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"DEBIAN-CVE-2024-25260","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T18:15:52.88Z","modified":"2026-11-02T12:01:37.758771999Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"UBUNTU-CVE-2024-25260","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T18:15:00Z","modified":"2026-04-22T14:42:09.366086Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"AZL-38203","title":"CVE-2024-25260 affecting package elfutils for versions less than 0.189-6","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.","status":"published","published":"2024-02-20T18:15:52Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"CLSA-2026-1787242456","title":"elfutils: Fix of 3 CVEs","description":"- CVE-2024-25260: out-of-bounds global read in arm_machine_flag_name() when an\n  ARM ELF header carries an EABI version byte greater than 5\n- CVE-2025-1376: NULL pointer dereference in elf_strptr() on a string section\n  that has sh_size set but no data read yet\n- CVE-2025-1377: NULL pointer dereference in eu-strip's\n  remove_debug_relocations() when a relocation section's sh_link references an\n  SHT_NOBITS section","status":"published","published":"2026-08-20T16:14:27Z","modified":"2026-10-26T09:30:35.950301212Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"MGASA-2025-0119","title":"Updated elfutils packages fix security vulnerabilities","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via\nthe handle_verdef() function at readelf.c. (CVE-2024-25260)\nGNU elfutils eu-readelf readelf.c print_string_section buffer overflow.\n(CVE-2025-1372)\nGNU elfutils eu-strip strip.c gelf_getsymshndx denial of service.\n(CVE-2025-1377)\n","status":"published","published":"2025-03-31T15:54:01Z","modified":"2026-04-16T04:40:37.139389224Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2024-25260","title":"CVE-2024-25260 in elfutils - Patched by Root","description":"Root has patched CVE-2024-25260 in the elfutils package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T09:07:11Z","modified":"2026-08-25T23:49:43.21614025Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"USN-7369-1","title":"elfutils vulnerabilities","description":"It was discovered that readelf from elfutils could be made to read out of\nbounds. If a user or automated system were tricked into running readelf\non a specially crafted file, an attacker could cause readelf to crash,\nresulting in a denial of service. This issue only affected Ubuntu 24.04\nLTS. (CVE-2024-25260)\n\nIt was discovered that readelf from elfutils could be made to write out of\nbounds. If a user or automated system were tricked into running readelf\non a specially crafted file, an attacker could cause readelf to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-1365)\n\nIt was discovered that readelf from elfutils could be made to dereference\ninvalid memory. If a user or automated system were tricked into running\nreadelf on a specially crafted file, an attacker could cause readelf to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n24.04 LTS and Ubuntu 24.10. (CVE-2025-1371)\n\nIt was discovered that readelf from elfutils could be made to dereference\ninvalid memory. If a user or automated system were tricked into running\nreadelf on a specially crafted file, an attacker could cause readelf to\ncrash, resulting in a denial of service. (CVE-2025-1372)\n\nIt was discovered that strip from elfutils could be made to dereference\ninvalid memory. If a user or automated system were tricked into running\nstrip on a specially crafted file, an attacker could cause strip to\ncrash, resulting in a denial of service. (CVE-2025-1377)\n","status":"published","published":"2025-03-24T19:24:01Z","modified":"2026-04-22T10:56:43.979283Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}