A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with "[f]ixed for 2.46".
CVSS Details
- CVSS 4.0 Base Score: 1.9 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-gprofngUpgrade binutilsUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-13-binutilsUpgrade binutils-goldUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-14-binutils-gprofngUpgrade binutils-develUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-15-binutils | Dec 23, 2025 | Dec 16, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gdb-headlessUpgrade gdb-helpUpgrade gdb | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdb-helpUpgrade gdbUpgrade gdb-headless | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdb-helpUpgrade gdb-headlessUpgrade gdb | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-13-binutils-develUpgrade binutilsUpgrade gcc-toolset-15-binutils-develUpgrade binutils-gprofngUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-goldUpgrade binutils-develUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-14-binutils-devel | Dec 22, 2025 | Sep 27, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Sep 27, 2025 |
| Redhat_linux | — | Upgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-14-binutils-gprofngUpgrade cross-binutils-s390x-debuginfoUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade binutilsUpgrade gcc-toolset-13-binutils-debuginfoUpgrade gcc-toolset-13-binutils-develUpgrade binutils-debuginfoUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-15-binutils-gprofngNo solution existsUpgrade gcc-toolset-13-binutils-gprofng-debuginfoUpgrade gcc-toolset-14-binutils-goldUpgrade cross-binutils-ppc64le-debuginfoUpgrade gcc-toolset-15-binutils-goldUpgrade binutils-develUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-14-binutils-develUpgrade cross-binutils-aarch64-debuginfoUpgrade binutils-goldUpgrade binutils-debugsourceUpgrade binutils-gprofng-debuginfoUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade binutils-gold-debuginfo | Dec 19, 2025 | Sep 27, 2025 |
| Rocky_linux | — | Upgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-13-binutils-debuginfoUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-14-binutilsUpgrade binutilsUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade binutils-gold-debuginfoUpgrade binutils-debugsourceUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade binutils-develUpgrade gcc-toolset-15-binutils-gprofngUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-14-binutils-develUpgrade binutils-debuginfoUpgrade gcc-toolset-15-binutils-gold | Jan 7, 2026 | Jan 6, 2026 |
| Ubuntu | — | Upgrade binutilsUpgrade binutils-multiarch | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub