PatchTheCVEelfutils vulnerabilities and fixes
Recent CVEs affecting elfutils, with upgrade or downgrade steps. 6 tracked.
elfutils has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-17. Highest priority: CVE-2025-1352 (score 35/100).
- CVE-2025-1377 LOW 3.3 DOWNGRADE A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192
- CVE-2025-1376 LOW 2.5 DOWNGRADE A vulnerability classified as problematic was found in GNU elfutils 0.192
- CVE-2025-1372 MEDIUM 5.3 DOWNGRADE A vulnerability was found in GNU elfutils 0.192
- CVE-2025-1371 LOW 3.3 DOWNGRADE A vulnerability has been found in GNU elfutils 0.192 and classified as problematic
- CVE-2025-1365 MEDIUM 5.3 DOWNGRADE A vulnerability, which was classified as critical, was found in GNU elfutils 0.192
- CVE-2025-1352 MEDIUM 5.0 DOWNGRADE A vulnerability has been found in GNU elfutils 0.192 and classified as critical
FAQ
How do I fix elfutils vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is elfutils being exploited right now?
None of the tracked elfutils CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which elfutils CVE should I patch first?
CVE-2025-1352 currently ranks highest (35/100): A vulnerability has been found in GNU elfutils 0.192 and classified as critical.