A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with "[f]ixed for 2.46".
CVSS Details
- CVSS 4.0 Base Score: 1.9 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-goldUpgrade binutilsUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-develUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-14-binutils-gprofngUpgrade binutils-gold | Dec 23, 2025 | Dec 16, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gdb-headlessUpgrade gdb-helpUpgrade gdb | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdb-helpUpgrade gdbUpgrade gdb-headless | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdbUpgrade gdb-headlessUpgrade gdb-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdbUpgrade gdb-headlessUpgrade gdb-help | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade binutils-develUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-14-binutils-develUpgrade binutils-goldUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-14-binutilsUpgrade binutils-gprofngUpgrade binutilsUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-15-binutils-devel | Dec 22, 2025 | Sep 27, 2025 |
| Redhat_linux | — | Upgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade gcc-toolset-14-binutils-gprofngNo solution existsUpgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade gcc-toolset-13-binutils-debuginfoUpgrade binutilsUpgrade binutils-debuginfoUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-13-binutils-gprofng-debuginfoUpgrade cross-binutils-s390x-debuginfoUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-goldUpgrade binutils-debugsourceUpgrade binutils-goldUpgrade binutils-develUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade cross-binutils-aarch64-debuginfoUpgrade binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-debuginfoUpgrade cross-binutils-ppc64le-debuginfoUpgrade binutils-gprofng-debuginfo | Dec 19, 2025 | Sep 27, 2025 |
| Rocky_linux | — | Upgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-13-binutils-debuginfoUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-15-binutils-debuginfoUpgrade binutilsUpgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade gcc-toolset-15-binutils-gprofngUpgrade binutils-debugsourceUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade binutils-develUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade binutils-gold-debuginfoUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-14-binutils-develUpgrade binutils-debuginfoUpgrade gcc-toolset-15-binutils-gold | Jan 7, 2026 | Jan 6, 2026 |
| Ubuntu | — | Upgrade binutilsUpgrade binutils-multiarch | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub