Skip to content
OpenAdvisories
Low WID-SEC-2025-2226 3 CVEs

binutils: Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 7, 2025 · Updated Dec 15, 2025 · Revision 8 · de-DE

Vendor: Google Vendor: SUSE Vendor: Ubuntu Product: Container-Optimized OS Product: Linux Product: Linux Product: openSUSE Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten.

Vulnerabilities 3

  • Low 3.3
    CVE-2025-11412

    GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

    A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exp…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Low 3.3
    CVE-2025-11413

    GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

    A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has …

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Low 3.3
    CVE-2025-11414

    GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

    A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. Th…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi

Revision history

  1. #8

    Neue Updates von SUSE aufgenommen

  2. #7

    Neue Updates von openSUSE aufgenommen

  3. #6

    doppelte Eintragung bereinigt

  4. #5

    Neue Updates von Ubuntu aufgenommen

  5. #4

    Neue Updates von SUSE aufgenommen

  6. #3

    Neue Updates aufgenommen

  7. #2

    Referenz(en) aufgenommen: EUVD-2025-31867, EUVD-2025-31864

  8. #1

    Initiale Fassung

References