{"id":"CVE-2025-1372","aliases":["AZL-56977","BELL-CVE-2025-1372","CLSA-2025-1765289483","DEBIAN-CVE-2025-1372","EUVD-2025-2130","GHSA-r49j-8ffh-3gvm","MGASA-2025-0119","OESA-2025-1177","OESA-2025-1178","OESA-2025-1179","OESA-2025-1180","OESA-2025-1181","ROOT-OS-DEBIAN-12-CVE-2025-1372","SUSE-RU-2025:4092-1","SUSE-SU-2025:4092-1","UBUNTU-CVE-2025-1372","USN-7369-1"],"status":"published","title":"GNU elfutils eu-readelf readelf.c print_string_section buffer overflow","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00349,"percentile":0.28811,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-120"],"published":"2025-02-17T03:00:36Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"elfutils","fixed_in":["0.189-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"elfutils","fixed_in":["0.193-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"elfutils","fixed_in":["0.193-r0"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"elfutils","fixed_in":["0.188-2.1.root.io.8","0.188-2.1.root.io.9","0.188-2.1.aikido.10"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-elfutils","fixed_in":["0.188-2.1.root.io.8","0.188-2.1.root.io.9","0.188-2.1.aikido.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"elfutils","fixed_in":["0.186-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"elfutils","fixed_in":["0.190-1.1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.189-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.187-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.187-r1"},{"fixed":"0.193-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.187-r1"},{"fixed":"0.193-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-debuginfod-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-debuginfod-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-default-yama-scope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-libelf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-libelf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"elfutils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.192-6.el9_6.alma.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.188-2.1","0.189-1","0.189-2","0.189-3","0.189-4","0.190-1","0.190-1.1","0.190-1.1~exp1","0.191-1","0.191-1~bpo12+1","0.191-2","0.192-1","0.192-2","0.192-3","0.192-4","0.192-4~bpo12+1","0.193-1","0.193-2","0.193-3","0.193-3~bpo13+1","0.194+20260315-1","0.194-1","0.194-2","0.194-3","0.194-4","0.195-1","0.195-1~bpo13+1","0.196-1"]},{"source":"osv","ecosystem":"Debian:13","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.192-4","0.193-1","0.193-2","0.193-3","0.193-3~bpo13+1","0.194+20260315-1","0.194-1","0.194-2","0.194-3","0.194-4","0.195-1","0.195-1~bpo13+1","0.196-1"]},{"source":"osv","ecosystem":"Debian:14","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.192-4","0.193-1","0.193-2","0.193-3","0.193-3~bpo13+1","0.194+20260315-1","0.194-1","0.194-2","0.194-3","0.194-4","0.195-1","0.195-1~bpo13+1","0.196-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.189-1.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-20.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.190-8.oe2403"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.190-8.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.180-17.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-20.oe2203sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Debian:12","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-2.1.root.io.8"},{"fixed":"0.188-2.1.root.io.9"},{"fixed":"0.188-2.1.aikido.10"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.188-2.1.root.io.8"},{"fixed":"0.188-2.1.root.io.9"},{"fixed":"0.188-2.1.aikido.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.3"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"elfutils-debuginfod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.185-150400.5.8.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.186-1ubuntu0.1"}]}],"versions":["0.185-1build1","0.185-2","0.186-1","0.186-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.190-1.1ubuntu0.1"}]}],"versions":["0.189-4","0.190-1","0.190-1.1build2","0.190-1.1build3","0.190-1.1build4","0.190-1.1build4.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.186-1ubuntu0.1"}]}],"versions":["0.185-1build1","0.185-2","0.186-1","0.186-1build1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"elfutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.190-1.1ubuntu0.1"}]}],"versions":["0.189-4","0.190-1","0.190-1.1build2","0.190-1.1build3","0.190-1.1build4","0.190-1.1build4.1"],"bundled":5}],"products":[{"vendor":"elfutils_project","product":"elfutils"},{"vendor":"gnu","product":"elfutils"}],"references":[{"url":"https://vuldb.com/?id.295981","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://vuldb.com/?ctiid.295981","tags":["signature","permissions-required","Permissions Required","VDB Entry","report"]},{"url":"https://vuldb.com/?submit.496485","tags":["third-party-advisory","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=32656","tags":["issue-tracking","Exploit","Issue Tracking","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=32657","tags":["issue-tracking","Exploit","Issue Tracking","report"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=15927","tags":["exploit","Exploit","evidence","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=32656#c3","tags":["issue-tracking","patch","Exploit","Issue Tracking","fix","report"]},{"url":"https://www.gnu.org/","tags":["product","Product","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1372","tags":["web","advisory"]},{"url":"https://www.gnu.org"},{"url":"https://github.com/advisories/GHSA-r49j-8ffh-3gvm"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-1372","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1765289483.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1372.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-1372","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0119.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34134","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7369-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1352","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1376","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1377","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1365","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1371","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1179","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1180","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1181","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2025-4092/suse-ru-20254092-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237236","tags":["report"]},{"url":"https://bugzilla.suse.com/1237240","tags":["report"]},{"url":"https://bugzilla.suse.com/1237241","tags":["report"]},{"url":"https://bugzilla.suse.com/1237242","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1377","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254092-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-1372","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-1372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1377","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-1372","title":"GNU elfutils eu-readelf readelf.c print_string_section buffer overflow","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:00:36.624Z","modified":"2025-02-18T15:55:33.549Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"2.0","score":4.3,"vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-120","CWE-119"],"updated_at":"2026-11-02T14:32:49.503917Z"}],"euvd":[{"id":"EUVD-2025-2130","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:00:36Z","modified":"2025-02-18T15:55:33Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T20:53:29.418558Z"}],"ghsa":[{"id":"GHSA-r49j-8ffh-3gvm","title":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by...","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:31:11Z","modified":"2025-11-04T21:32:35Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-119","CWE-120"],"updated_at":"2026-11-02T15:04:38.82847Z"}],"nvd":[{"id":"CVE-2025-1372","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:15:09.573Z","modified":"2026-06-17T08:39:00.497Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"secondary"}],"cwes":["CWE-119","CWE-120"],"updated_at":"2026-11-02T14:10:51.445921Z"}],"osv":[{"id":"AZL-56977","title":"CVE-2025-1372 affecting package elfutils for versions less than 0.189-4","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-05T16:41:21.162429Z"},{"id":"BELL-CVE-2025-1372","status":"published","published":"2025-02-18T05:58:10.751907Z","modified":"2026-01-26T09:41:23.183656Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-1372","title":"GNU elfutils eu-readelf readelf.c print_string_section buffer overflow","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:00:36.624Z","modified":"2026-10-28T02:30:37.72696118Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-119","CWE-120"],"updated_at":"2026-11-02T15:44:46.340268Z"},{"id":"DEBIAN-CVE-2025-1372","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:15:09.573Z","modified":"2026-09-01T20:05:41.140848418Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"OESA-2025-1177","title":"elfutils security update","description":"Elfutils is a collection of utilities, including stack (to show\nbacktraces), nm (for listing symbols from object files), size\n(for listing the section sizes of an object or archive file),\nstrip (for discarding symbols), readelf (to see the raw ELF file\nstructures), elflint (to check for well-formed ELF files) and\nelfcompress (to compress or decompress ELF sections).\nAlso included are helper libraries which implement DWARF, ELF,\nand machine-specific ELF handling and process introspection.\nIt also provides a DSO which allows reading and\nwriting ELF files on a high level. Third party programs depend on\nthis package to read internals of ELF files. \nYama sysctl setting to enable default attach scope settings\nenabling programs to use ptrace attach, access to\n/proc/PID/{mem,personality,stack,syscall}, and the syscalls\nprocess_vm_readv and process_vm_writev which are used for\ninterprocess services, communication and introspection\n(like synchronisation, signaling, debugging, tracing and\nprofiling) of processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.(CVE-2025-1352)\n\nA vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.(CVE-2025-1372)\n\nA vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.(CVE-2025-1376)\n\nA vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.(CVE-2025-1377)","status":"published","published":"2025-02-21T11:08:16Z","modified":"2026-08-18T01:18:47.985708412Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1178","title":"elfutils security update","description":"Elfutils is a collection of utilities, including stack (to show\nbacktraces), nm (for listing symbols from object files), size\n(for listing the section sizes of an object or archive file),\nstrip (for discarding symbols), readelf (to see the raw ELF file\nstructures), elflint (to check for well-formed ELF files) and\nelfcompress (to compress or decompress ELF sections).\nAlso included are helper libraries which implement DWARF, ELF,\nand machine-specific ELF handling and process introspection.\nIt also provides a DSO which allows reading and\nwriting ELF files on a high level. Third party programs depend on\nthis package to read internals of ELF files. \nYama sysctl setting to enable default attach scope settings\nenabling programs to use ptrace attach, access to\n/proc/PID/{mem,personality,stack,syscall}, and the syscalls\nprocess_vm_readv and process_vm_writev which are used for\ninterprocess services, communication and introspection\n(like synchronisation, signaling, debugging, tracing and\nprofiling) of processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.(CVE-2025-1352)\n\nA vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_symtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5e5c0394d82c53e97750fe7b18023e6f84157b81. It is recommended to apply a patch to fix this issue.(CVE-2025-1365)\n\nA vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue.(CVE-2025-1371)\n\nA vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.(CVE-2025-1372)\n\nA vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.(CVE-2025-1376)\n\nA vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.(CVE-2025-1377)","status":"published","published":"2025-02-21T11:08:16Z","modified":"2026-08-18T01:18:47.986475952Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1179","title":"elfutils security update","description":"Elfutils is a collection of utilities, including stack (to show\nbacktraces), nm (for listing symbols from object files), size\n(for listing the section sizes of an object or archive file),\nstrip (for discarding symbols), readelf (to see the raw ELF file\nstructures), elflint (to check for well-formed ELF files) and\nelfcompress (to compress or decompress ELF sections).\nAlso included are helper libraries which implement DWARF, ELF,\nand machine-specific ELF handling and process introspection.\nIt also provides a DSO which allows reading and\nwriting ELF files on a high level. Third party programs depend on\nthis package to read internals of ELF files. \nYama sysctl setting to enable default attach scope settings\nenabling programs to use ptrace attach, access to\n/proc/PID/{mem,personality,stack,syscall}, and the syscalls\nprocess_vm_readv and process_vm_writev which are used for\ninterprocess services, communication and introspection\n(like synchronisation, signaling, debugging, tracing and\nprofiling) of processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.(CVE-2025-1352)\n\nA vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_symtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5e5c0394d82c53e97750fe7b18023e6f84157b81. It is recommended to apply a patch to fix this issue.(CVE-2025-1365)\n\nA vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue.(CVE-2025-1371)\n\nA vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.(CVE-2025-1372)\n\nA vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.(CVE-2025-1376)\n\nA vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.(CVE-2025-1377)","status":"published","published":"2025-02-21T11:08:16Z","modified":"2026-08-18T01:18:48.051799385Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1180","title":"elfutils security update","description":"Elfutils is a collection of utilities, including stack (to show\nbacktraces), nm (for listing symbols from object files), size\n(for listing the section sizes of an object or archive file),\nstrip (for discarding symbols), readelf (to see the raw ELF file\nstructures), elflint (to check for well-formed ELF files) and\nelfcompress (to compress or decompress ELF sections).\nAlso included are helper libraries which implement DWARF, ELF,\nand machine-specific ELF handling and process introspection.\nIt also provides a DSO which allows reading and\nwriting ELF files on a high level. Third party programs depend on\nthis package to read internals of ELF files. \nYama sysctl setting to enable default attach scope settings\nenabling programs to use ptrace attach, access to\n/proc/PID/{mem,personality,stack,syscall}, and the syscalls\nprocess_vm_readv and process_vm_writev which are used for\ninterprocess services, communication and introspection\n(like synchronisation, signaling, debugging, tracing and\nprofiling) of processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.(CVE-2025-1352)\n\nA vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.(CVE-2025-1372)\n\nA vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.(CVE-2025-1376)\n\nA vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.(CVE-2025-1377)","status":"published","published":"2025-02-21T11:08:16Z","modified":"2026-08-18T01:18:48.038997677Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1181","title":"elfutils security update","description":"Elfutils is a collection of utilities, including stack (to show\nbacktraces), nm (for listing symbols from object files), size\n(for listing the section sizes of an object or archive file),\nstrip (for discarding symbols), readelf (to see the raw ELF file\nstructures), elflint (to check for well-formed ELF files) and\nelfcompress (to compress or decompress ELF sections).\nAlso included are helper libraries which implement DWARF, ELF,\nand machine-specific ELF handling and process introspection.\nIt also provides a DSO which allows reading and\nwriting ELF files on a high level. Third party programs depend on\nthis package to read internals of ELF files. \nYama sysctl setting to enable default attach scope settings\nenabling programs to use ptrace attach, access to\n/proc/PID/{mem,personality,stack,syscall}, and the syscalls\nprocess_vm_readv and process_vm_writev which are used for\ninterprocess services, communication and introspection\n(like synchronisation, signaling, debugging, tracing and\nprofiling) of processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.(CVE-2025-1352)\n\nA vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.(CVE-2025-1372)\n\nA vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.(CVE-2025-1376)\n\nA vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.(CVE-2025-1377)","status":"published","published":"2025-02-21T11:08:16Z","modified":"2026-08-18T01:18:48.052968647Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-1372","title":"CVE-2025-1372 in elfutils - Patched by Root","description":"Root has patched CVE-2025-1372 in the elfutils package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T09:07:11Z","modified":"2026-08-25T23:49:43.342825473Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"UBUNTU-CVE-2025-1372","description":"A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.","status":"published","published":"2025-02-17T03:15:00Z","modified":"2026-04-22T15:30:34.564139Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"},{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"CLSA-2025-1765289483","title":"elfutils: Fix of 3 CVEs","description":"- CVE-2025-1352: fix memory corruption when using -w option with a specially\n  crafted input file\n- CVE-2025-1365: fix buffer overflow when using the -D and -a options with a\n  specially crafted input file\n- CVE-2025-1372: fix buffer overflow when using the -z and -x options with a\n  specially crafted input file","status":"published","published":"2025-12-09T14:11:26Z","modified":"2026-06-01T00:32:36.827610316Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"MGASA-2025-0119","title":"Updated elfutils packages fix security vulnerabilities","description":"elfutils v0.189 was discovered to contain a NULL pointer dereference via\nthe handle_verdef() function at readelf.c. (CVE-2024-25260)\nGNU elfutils eu-readelf readelf.c print_string_section buffer overflow.\n(CVE-2025-1372)\nGNU elfutils eu-strip strip.c gelf_getsymshndx denial of service.\n(CVE-2025-1377)\n","status":"published","published":"2025-03-31T15:54:01Z","modified":"2026-04-16T04:40:37.139389224Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"SUSE-RU-2025:4092-1","title":"Security update for elfutils","description":"This update for elfutils fixes the following issues:\n\n- Fixing build/testsuite for more recent glibc and kernels.\n\n- Fixing denial of service and general buffer overflow errors\n  (bsc#1237236, bsc#1237240, bsc#1237241, bsc#1237242):\n\n  - CVE-2025-1376: Fixed denial of service in  function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip\n  - CVE-2025-1377: Fixed denial of service in function gelf_getsymshndx of the file strip.c of the component eu-strip\n  - CVE-2025-1372: Fixed buffer overflow in function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf\n  - CVE-2025-1352: Fixed SEGV (illegal read access) in function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf\n\n- Fixing testsuite race conditions in run-debuginfod-find.sh.","status":"published","published":"2025-11-24T09:08:35Z","modified":"2026-03-23T04:47:31.790235Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2025:4092-1","title":"Security update for elfutils","description":"This update for elfutils fixes the following issues:\n\n- Fixing build/testsuite for more recent glibc and kernels.\n\n- Fixing denial of service and general buffer overflow errors\n  (bsc#1237236, bsc#1237240, bsc#1237241, bsc#1237242):\n\n  - CVE-2025-1376: Fixed denial of service in  function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip\n  - CVE-2025-1377: Fixed denial of service in function gelf_getsymshndx of the file strip.c of the component eu-strip\n  - CVE-2025-1372: Fixed buffer overflow in function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf\n  - CVE-2025-1352: Fixed SEGV (illegal read access) in function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf\n\n- Fixing testsuite race conditions in run-debuginfod-find.sh.","status":"published","published":"2025-11-24T09:08:35Z","modified":"2026-03-23T04:51:25.909367Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"USN-7369-1","title":"elfutils vulnerabilities","description":"It was discovered that readelf from elfutils could be made to read out of\nbounds. If a user or automated system were tricked into running readelf\non a specially crafted file, an attacker could cause readelf to crash,\nresulting in a denial of service. This issue only affected Ubuntu 24.04\nLTS. (CVE-2024-25260)\n\nIt was discovered that readelf from elfutils could be made to write out of\nbounds. If a user or automated system were tricked into running readelf\non a specially crafted file, an attacker could cause readelf to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-1365)\n\nIt was discovered that readelf from elfutils could be made to dereference\ninvalid memory. If a user or automated system were tricked into running\nreadelf on a specially crafted file, an attacker could cause readelf to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n24.04 LTS and Ubuntu 24.10. (CVE-2025-1371)\n\nIt was discovered that readelf from elfutils could be made to dereference\ninvalid memory. If a user or automated system were tricked into running\nreadelf on a specially crafted file, an attacker could cause readelf to\ncrash, resulting in a denial of service. (CVE-2025-1372)\n\nIt was discovered that strip from elfutils could be made to dereference\ninvalid memory. If a user or automated system were tricked into running\nstrip on a specially crafted file, an attacker could cause strip to\ncrash, resulting in a denial of service. (CVE-2025-1377)\n","status":"published","published":"2025-03-24T19:24:01Z","modified":"2026-04-22T10:56:43.979283Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}