PT-2025-6051 · Gnu+3 · Gnu Binutils+3

Wenjusun · Published 2025-02-05 · Updated 2026-04-20 · CVE-2025-1179

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A critical issue has been found in GNU Binutils, affecting the function bfd putl64 of the file bfd/libbfd.c of the component ld. This issue leads to memory corruption and can be exploited remotely, although the complexity of an attack is rather high and the exploitation is known to be difficult.

Recommendations For GNU Binutils version 2.43, upgrade to version 2.44 to address this issue. As a temporary workaround, consider restricting the use of the bfd putl64 function until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-01796

CVE-2025-1179

ECHO-B344-B223-6ADF

OPENSUSE-SU-2025:15651-1

OPENSUSE-SU-2025:20150-1

SUSE-SU-2025:21195-1

SUSE-SU-2025:21197-1

SUSE-SU-2025:4096-1

Affected Products

Astra Linux

Debian

Gnu Binutils

Suse

References · 90

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=32640#c1 · Exploit
• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=32640 · Exploit
• 🔥 https://sourceware.org/bugzilla/attachment.cgi?id=15915 · Exploit
• 🔥 https://vuldb.com/?submit.495376 · Exploit
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01796 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-1179 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4096-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-1179 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1179 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1179 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21195-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-1179 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20150-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21197-1 · Vendor Advisory