A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade binutils | Aug 8, 2025 | Jan 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade binutilsUpgrade gcc10-binutils-goldUpgrade binutils-develUpgrade gcc10-binutilsUpgrade binutils-debuginfoUpgrade gcc10-binutils-develUpgrade gcc10-binutils-debuginfo | Mar 10, 2025 | Jan 29, 2025 |
| Amazon_linux_2023 | — | Upgrade binutils-gprofngUpgrade binutils-debuginfoUpgrade binutils-develUpgrade binutils-gprofng-debuginfoUpgrade binutilsUpgrade binutils-debugsource | Mar 10, 2025 | Jan 29, 2025 |
| Debian | — | Upgrade binutils | May 15, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade binutils | May 13, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade binutils | Apr 11, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade binutils | May 7, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade binutils | Apr 1, 2025 | Jan 29, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 29, 2025 |
| Suse | — | Upgrade perf-bash-completionUpgrade perf-gtkUpgrade bpftoolUpgrade cross-sparc64-binutilsUpgrade binutils-develUpgrade binutilsUpgrade cross-arm-binutilsUpgrade cross-ia64-binutilsUpgrade cross-spu-binutilsUpgrade libuct0Upgrade cross-ppc64le-binutilsUpgrade cross-s390x-binutilsUpgrade libucs0Upgrade libucp0Upgrade cross-loongarch64-binutilsUpgrade cross-aarch64-binutilsUpgrade cross-rx-binutilsUpgrade cross-hppa64-binutilsUpgrade cross-bpf-binutilsUpgrade libucp-develUpgrade cross-avr-binutilsUpgrade libctf0Upgrade bpftool-bash-completionUpgrade gprofngUpgrade cross-xtensa-binutilsUpgrade cross-pru-binutilsUpgrade cross-x86_64-binutilsUpgrade cross-i386-binutilsUpgrade binutils-devel-32bitUpgrade libucm0Upgrade libctf-nobfd0Upgrade openucx-toolsUpgrade cross-s390-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-ppc64-binutilsUpgrade cross-epiphany-binutilsUpgrade perfUpgrade cross-ppc-binutilsUpgrade libucs-develUpgrade cross-hppa-binutilsUpgrade perf-develUpgrade libucm-develUpgrade cross-m68k-binutilsUpgrade cross-sparc-binutilsUpgrade libuct-develUpgrade cross-mips-binutils | Nov 17, 2025 | Nov 14, 2025 |
| Ubuntu | — | Upgrade binutils (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils | Feb 27, 2025 | Jan 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub