A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue.
CVSS Details
- CVSS 4.0 Base Score: 2.3 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade binutils-debugsourceUpgrade binutils-develUpgrade binutils-gprofng-debuginfoUpgrade binutils-debuginfoUpgrade binutilsUpgrade binutils-gprofng | Apr 30, 2025 | Feb 11, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 11, 2025 |
| Suse | — | Upgrade perf-bash-completionUpgrade bpftool-bash-completionUpgrade cross-aarch64-binutilsUpgrade libuct0Upgrade cross-s390x-binutilsUpgrade cross-xtensa-binutilsUpgrade perf-develUpgrade libucs0Upgrade cross-avr-binutilsUpgrade cross-rx-binutilsUpgrade binutils-devel-32bitUpgrade bpftoolUpgrade binutils-develUpgrade cross-ia64-binutilsUpgrade cross-ppc64le-binutilsUpgrade cross-m68k-binutilsUpgrade libucp0Upgrade cross-epiphany-binutilsUpgrade cross-sparc64-binutilsUpgrade cross-spu-binutilsUpgrade cross-sparc-binutilsUpgrade cross-arm-binutilsUpgrade cross-ppc-binutilsUpgrade cross-hppa64-binutilsUpgrade libucm-develUpgrade cross-mips-binutilsUpgrade libucp-develUpgrade libucs-develUpgrade libctf-nobfd0Upgrade cross-pru-binutilsUpgrade libctf0Upgrade cross-ppc64-binutilsUpgrade cross-loongarch64-binutilsUpgrade libucm0Upgrade perfUpgrade gprofngUpgrade cross-riscv64-binutilsUpgrade cross-hppa-binutilsUpgrade cross-x86_64-binutilsUpgrade cross-bpf-binutilsUpgrade libuct-develUpgrade cross-s390-binutilsUpgrade cross-i386-binutilsUpgrade binutilsUpgrade perf-gtkUpgrade openucx-tools | Nov 17, 2025 | Nov 14, 2025 |
| Ubuntu | — | Upgrade binutils (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils | Apr 8, 2025 | Feb 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Feb 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub