A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.
Note that this CVE was filed without following the upstream SECURITY policy: https://sourceware.org/cgit/elfutils/tree/SECURITY This is NOT a security issue according to upstream policy. It was filed against GNU as vendor but elfutils is not a GNU package. Upstream request that people who report suspected security vulnerabilities report them through the contacts in the SECURITY policy and not through non-affiliated CNAs.