Skip to content
OpenAdvisories
Medium WID-SEC-2025-0304 13 CVEs

binutils: Mehrere Schwachstellen

Published Feb 10, 2025 · Updated Dec 15, 2025 · Revision 12 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service-Zustand zu erzeugen oder nicht spezifizierte Auswirkungen zu verursachen.

Product

Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten.

Vulnerabilities 13

  • Medium 5.6

    GNU Binutils ld libbfd.c bfd_putl64 memory corruption

    A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched re…

  • Medium 5.0

    GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

    A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remot…

  • Medium 5.0

    GNU Binutils ld libbfd.c bfd_putl64 memory corruption

    A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. Th…

  • Medium 5.0

    GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

    A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remote…

  • Medium 5.0

    GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

    A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the…

  • Low 3.1

    GNU Binutils nm nm.c internal_strlen buffer overflow

    A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::internal_strlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffe…

  • Low 3.1

    GNU Binutils ld ldelfgen.c link_order_scan memory leak

    A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The…

  • Low 3.1

    GNU Binutils ld xmalloc.c xstrdup memory leak

    A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely…

  • Low 3.1

    GNU Binutils ld libbfd.c bfd_malloc memory leak

    A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The …

  • Low 3.1

    GNU Binutils ld xmemdup.c xmemdup memory leak

    A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of…

  • Low 3.1

    GNU Binutils ld xstrdup.c xstrdup memory leak

    A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The manipulation leads to memory leak. It is possible to launch the attack remotely. The complexity of a…

  • Low 3.1

    GNU Binutils format.c bfd_set_format memory corruption

    A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity…

  • Low 3.1

    GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

    A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiat…

Revision history

  1. #12

    Neue Updates von SUSE aufgenommen

  2. #11

    Neue Updates von openSUSE aufgenommen

  3. #10

    Neue Updates von Ubuntu aufgenommen

  4. #9

    Neue Updates von SUSE aufgenommen

  5. #8

    Neue Updates von Ubuntu aufgenommen

  6. #7

    Neue Updates von NetApp aufgenommen

  7. #6

    Neue Updates von Ubuntu aufgenommen

  8. #5

    Neue Updates von NetApp aufgenommen

  9. #4

    Neue Updates von NetApp aufgenommen

  10. #3

    Neue Updates von Ubuntu aufgenommen

  11. #2

    Neue Updates von NetApp aufgenommen

  12. #1

    Initiale Fassung

References