CVE-2025-1179: falha de baixa gravidade em GNU Binutils
GNU Binutils ld libbfd.c bfd_putl64 memory corruption
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2.3epss 0.6%
A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer explains, that "[t]his bug has been fixed at some point between the 2.43 and 2.44 releases".
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
GNU · BinutilsCVEs relacionadas — GNU Binutils
No mesmo produto, das mais perigosas para as menos.
CVE-2025-1153LOWGNU Binutils format.c bfd_set_format memory corruptionEPSS 1.4%CVE-2025-1178MEDIUMGNU Binutils ld libbfd.c bfd_putl64 memory corruptionEPSS 0.8%CVE-2025-0840MEDIUMGNU Binutils objdump.c disassemble_bytes stack-based overflowEPSS 0.7%CVE-2025-1181LOWGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruptionEPSS 0.7%CVE-2025-1180LOWGNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruptionEPSS 0.7%CVE-2025-1176LOWGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflowEPSS 0.7%