High WID-SEC-2025-2933 6 CVEs

binutils: Mehrere Schwachstellen ermöglichen Denial of Service

Published Dec 29, 2025 · Updated Mar 29, 2026 · Revision 3 · de-DE

Vendor: F5 Vendor: NETAPP Product: ActiveIQ Unified Manager Product: F5OS Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten.

Vulnerabilities 6

High 7.5

CVE-2025-66862

A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause …

binutils binutils Debian Ubuntu

Dec 29, 2025
High 7.5

CVE-2025-66863

An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a …

binutils binutils Debian Ubuntu

Dec 29, 2025
High 7.5

CVE-2025-66865

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause…

binutils binutils Debian Ubuntu

Dec 29, 2025
Medium 5.5

CVE-2025-66864

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause…

binutils binutils Debian Ubuntu

Dec 29, 2025
Medium 5.5

CVE-2025-66866

An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denia…

binutils binutils Debian Ubuntu

Dec 29, 2025
Low 2.5

CVE-2025-66861

An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cau…

binutils binutils Debian Ubuntu

Dec 29, 2025

Revision history

2026-03-29 #3
Neue Updates von NetApp aufgenommen
2026-02-03 #2
Neue Updates von F5 aufgenommen
2025-12-29 #1
Initiale Fassung

References

GitHub Advisory Database vom 2025-12-29
https://github.com/advisories/GHSA-R326-PP3G-7CQ4
GitHub Advisory Database vom 2025-12-29
https://github.com/advisories/GHSA-RHG5-G54M-7CQ3
GitHub Advisory Database vom 2025-12-29
https://github.com/advisories/GHSA-VPHR-3984-5C8W
GitHub Advisory Database vom 2025-12-29
https://github.com/advisories/GHSA-G3FH-R5Q2-X687
GitHub Advisory Database vom 2025-12-29
https://github.com/advisories/GHSA-W539-2PGJ-G759
GitHub Advisory Database vom 2025-12-29
https://github.com/advisories/GHSA-GJRJ-58F4-PGRH
PoC für CVE-2025-66861
https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md
PoC für CVE-2025-66862
https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash3.md
PoC für CVE-2025-66863
https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md
PoC für CVE-2025-66864
https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash5.md
PoC für CVE-2025-66865
https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md
PoC für CVE-2025-66866
https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash6.md
F5 Security Advisory K000159856 vom 2026-02-03
https://my.f5.com/manage/s/article/K000159856
NetApp Security Advisory NTAP-20260220-0015 vom 2026-03-27
https://security.netapp.com/advisory/NTAP-20260220-0015