CVE-2025-1376

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.

• CWE-404

• https://sourceware.org/bugzilla/attachment.cgi?id=15940Exploit
• https://sourceware.org/bugzilla/show_bug.cgi?id=32672Exploit, Issue Tracking
• https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3Exploit, Issue Tracking
• https://vuldb.com/?ctiid.295984Permissions Required, VDB Entry
• https://vuldb.com/?id.295984Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.497538Third Party Advisory, VDB Entry
• https://www.gnu.org/Product
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html

Published

Feb 17, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13753The WP Table Builder – Drag & Drop Table Builder plugin for …4.3
• CVE-2025-13754The Appointment Booking Calendar — Simply Schedule Appointme…5.3
• CVE-2025-13755IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for…5.5
• CVE-2025-13756The Fluent Booking plugin for WordPress is vulnerable to una…4.3
• CVE-2025-13757SQL Injection vulnerability in last usage logs in Devolution…8.8
• CVE-2025-13758Exposure of credentials in unintended requests in Devolution…3.5
• CVE-2025-13760Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-13761GitLab has remediated an issue in GitLab CE/EE affecting all…9.6
• CVE-2025-13762Improper Input Validation vulnerability in CyberArk CyberArk…4.8
• CVE-2025-13763Multiple uses of uninitialized variables were found in libop…5.7
• CVE-2025-13764The WP CarDealer plugin for WordPress is vulnerable to Privi…9.8
• CVE-2025-13765Exposure of email service credentials to users without admin…4.3