A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue.
CVSS Details
- CVSS 4.0 Base Score: 2.3 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade binutils-debuginfoUpgrade binutils-develUpgrade binutils-debugsourceUpgrade binutils-gprofng-debuginfoUpgrade binutils-gprofngUpgrade binutils | Apr 30, 2025 | Feb 11, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 11, 2025 |
| Suse | — | Upgrade cross-s390-binutilsUpgrade cross-hppa-binutilsUpgrade cross-riscv64-binutilsUpgrade perfUpgrade cross-i386-binutilsUpgrade gprofngUpgrade binutilsUpgrade cross-bpf-binutilsUpgrade cross-sparc-binutilsUpgrade cross-hppa64-binutilsUpgrade libucp-develUpgrade openucx-toolsUpgrade libucm-develUpgrade cross-ppc-binutilsUpgrade libucs-develUpgrade perf-gtkUpgrade libuct-develUpgrade cross-ppc64-binutilsUpgrade cross-arm-binutilsUpgrade cross-mips-binutilsUpgrade cross-x86_64-binutilsUpgrade libctf0Upgrade libucm0Upgrade cross-pru-binutilsUpgrade libctf-nobfd0Upgrade cross-loongarch64-binutilsUpgrade cross-spu-binutilsUpgrade binutils-devel-32bitUpgrade cross-aarch64-binutilsUpgrade cross-s390x-binutilsUpgrade bpftool-bash-completionUpgrade perf-bash-completionUpgrade cross-xtensa-binutilsUpgrade cross-m68k-binutilsUpgrade bpftoolUpgrade libucp0Upgrade libuct0Upgrade cross-avr-binutilsUpgrade cross-rx-binutilsUpgrade libucs0Upgrade binutils-develUpgrade cross-epiphany-binutilsUpgrade cross-sparc64-binutilsUpgrade cross-ppc64le-binutilsUpgrade cross-ia64-binutilsUpgrade perf-devel | Nov 17, 2025 | Nov 14, 2025 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutilsUpgrade binutils (Ubuntu Pro) | Apr 8, 2025 | Feb 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Feb 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub