CVE-2025-1377

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.

• CWE-404

• https://sourceware.org/bugzilla/attachment.cgi?id=15941Exploit
• https://sourceware.org/bugzilla/show_bug.cgi?id=32673Exploit, Issue Tracking
• https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2Exploit, Issue Tracking
• https://vuldb.com/?ctiid.295985Permissions Required, VDB Entry
• https://vuldb.com/?id.295985Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.497539Third Party Advisory, VDB Entry
• https://www.gnu.org/Product

Published

Feb 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13764The WP CarDealer plugin for WordPress is vulnerable to Privi…9.8
• CVE-2025-13765Exposure of email service credentials to users without admin…4.3
• CVE-2025-13766The MasterStudy LMS WordPress Plugin – for Online Courses an…5.4
• CVE-2025-13767Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.1…4.3
• CVE-2025-13768WebITR developed by Uniong has an Authentication Bypass vuln…8.8
• CVE-2025-13769WebITR developed by Uniong has a SQL Injection vulnerability…7.1
• CVE-2025-13770WebITR developed by Uniong has a SQL Injection vulnerability…7.1
• CVE-2025-13771WebITR developed by Uniong has an Arbitrary File Read vulner…7.1
• CVE-2025-13772GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2025-13773The Print Invoice & Delivery Notes for WooCommerce plugin fo…9.8
• CVE-2025-13774A vulnerability exists in Progress Flowmon ADS versions prio…8.8
• CVE-2025-13776Multiple Finka programs use hard-coded Firebird database cre…7.1