A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".
CVSS Details
- CVSS 4.0 Base Score: 1.9 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp10 | — | Upgrade gdbUpgrade gdb-helpUpgrade gdb-headless | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdbUpgrade gdb-helpUpgrade gdb-headless | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade binutils-goldUpgrade binutils-develUpgrade binutilsUpgrade binutils-gprofng | Dec 22, 2025 | Sep 27, 2025 |
| Redhat_linux | — | Upgrade binutils-develUpgrade binutils-goldUpgrade binutils-debugsourceUpgrade binutils-gprofng-debuginfoUpgrade binutils-debuginfoUpgrade binutils-gold-debuginfoNo solution existsUpgrade binutilsUpgrade cross-binutils-ppc64le-debuginfoUpgrade cross-binutils-aarch64-debuginfoUpgrade cross-binutils-s390x-debuginfo | Dec 19, 2025 | Sep 27, 2025 |
| Rocky_linux | — | Upgrade binutils-gold-debuginfoUpgrade binutils-develUpgrade binutils-debuginfoUpgrade binutils-debugsourceUpgrade binutilsUpgrade binutils-gold | Feb 5, 2026 | Dec 20, 2025 |
| Ubuntu | — | Upgrade binutils (Ubuntu Pro)Upgrade binutilsUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarch | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub