PT-2025-6052 · Gnu+2 · Gnu Binutils+2

Wenjusun · Published 2025-02-10 · Updated 2026-03-12 · CVE-2025-1180

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A problematic issue has been found in GNU Binutils, affecting the bfd elf write section eh frame function of the ld component. This issue leads to memory corruption and can be initiated remotely, although the complexity of an attack is rather high and the exploitability is difficult.

Recommendations To fix this issue, it is recommended to apply a patch. As a temporary workaround, consider restricting access to the bfd elf write section eh frame function until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

AZL-56701

AZL-56702

AZL-56726

AZL-56735

AZL-56743

AZL-56797

CVE-2025-1180

ECHO-0153-957A-44F0

OPENSUSE-SU-2025:15651-1

OPENSUSE-SU-2025:20150-1

SUSE-SU-2025:21195-1

SUSE-SU-2025:21197-1

SUSE-SU-2025:4096-1

USN-7899-1

Affected Products

Debian

Gnu Binutils

Suse

References · 106

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=32642 · Exploit
• 🔥 https://vuldb.com/?submit.495381 · Exploit
• 🔥 https://sourceware.org/bugzilla/attachment.cgi?id=15917 · Exploit
• https://osv.dev/vulnerability/AZL-56735 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-56701 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1180 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-1180 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15651-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4096-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8225 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-1180 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7899-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7899-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1181 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21197-1 · Vendor Advisory