CVE-2025-1371

EUVD-2025-2129 · Published Feb 17, 2025

A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue.

Technologies

Elfutils_Project Elfutils

Weaknesses

CWE-404CWE-476

CVSS scores

v4.04.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
v3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
v2.01.7AV:L/AC:L/Au:S/C:N/I:N/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation Impact

T1068Exploitation for Privilege Escalation T1498.001Direct Network Flood T1499Endpoint Denial of Service T1499.001OS Exhaustion Flood T1499.003Application Exhaustion Flood

References

Potentially impacted assets

See if this affects your attack surface