Skip to content
OpenAdvisories
Low WID-SEC-2025-2327 2 CVEs

binutils: Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 16, 2025 · Updated Oct 5, 2026 · Revision 3 · de-DE

Vendor: SUSE Vendor: Ubuntu Product: Linux Product: openSUSE

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten.

Vulnerabilities 2

  • Low 3.3
    CVE-2025-11839

    GNU Binutils prdbg.c tg_tag_type return value

    A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the pu…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Low 3.3
    CVE-2025-11840

    GNU Binutils ldmisc.c vfinfo out-of-bounds

    A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the…

    GNU Binutils binutils binutils Debian Ubuntu Wolfi

Revision history

  1. #3

    Neue Updates von openSUSE aufgenommen

  2. #2

    Neue Updates von Ubuntu aufgenommen

  3. #1

    Initiale Fassung

References