CVE-2025-1365 MEDIUM

CVE-2025-1365: GNU elfutils eu-readelf readelf.c process_symtab buffer overflow

Vendor Gnu
Product elfutils
Weakness CWE-120
Published February 16, 2025
Last update February 18, 2025

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_symtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5e5c0394d82c53e97750fe7b18023e6f84157b81. It is recommended to apply a patch to fix this issue.

Key dates

02Disclosure timeline

February 16, 2025 CVE published
February 18, 2025 Record updated