Summary
It was discovered that GNU binutils in nm tool is affected by an
incorrect access control. An attacker could possibly use this issue
to cause a crash. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04
LTS, and Ubuntu 24.10. (CVE-2024-57360)
It was discovered that GNU binutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. (CVE-2025-0840)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | binutils | 2.34-6ubuntu1.10 |
| Ubuntu · 22.04 LTS 22.04:LTS | binutils | 2.38-4ubuntu2.7 |
| Ubuntu · 24.04 LTS 24.04:LTS | binutils | 2.42-4ubuntu2.4 |
Vulnerabilities 2
-
Medium 5.5
https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The type of exploitation is:…
-
Medium 5.0
GNU Binutils objdump.c disassemble_bytes stack-based overflow
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible t…