| Reporter | Title | Published | Views | Family All 56 |
|---|---|---|---|---|
| CVE-2025-11413 | 7 Oct 202522:15 | – | alpinelinux | |
| Astra Linux - уязвимость в binutils | 20 May 202605:53 | – | astralinux | |
| CVE-2025-11413 vulnerabilities | 12 Nov 202519:17 | – | cgr | |
| CVE-2025-11413 | 11 Dec 202500:30 | – | circl | |
| GNU Binutils 安全漏洞 | 7 Oct 202500:00 | – | cnnvd | |
| CVE-2025-11413 | 7 Oct 202522:02 | – | cve | |
| CVE-2025-11413 GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds | 7 Oct 202522:02 | – | cvelist | |
| CVE-2025-11413 | 7 Oct 202522:02 | – | debiancve | |
| EUVD-2025-31864 | 8 Oct 202500:31 | – | euvd | |
| GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds | 11 Oct 202501:02 | – | mscve |
| Source | Link |
|---|---|
| access | www.access.redhat.com/security/cve/cve-2025-11413 |
| security-tracker | www.security-tracker.debian.org/tracker/CVE-2025-11413 |
| cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(271158);
script_version("1.6");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/17");
script_cve_id("CVE-2025-11413");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2025-11413");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of
the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack
needs to be approached locally. The exploit has been made public and could be used. Upgrading to version
2.46 is able to address this issue. The patch is identified as 72efdf166aa0ed72ecc69fc2349af6591a7a19c0.
Upgrading the affected component is advised. (CVE-2025-11413)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2025-11413");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2025-11413");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:U/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:U/RC:C");
script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N");
script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:P");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-11413");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2025/10/07");
script_set_attribute(attribute:"plugin_publication_date", value:"2025/10/22");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:11.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:10");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-13-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-13-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-13-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-13-gdb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-gdb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gdb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gdb-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gdb-gdbserver");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gdb-headless");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gdb-minimal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw-binutils-generic");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw32-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw64-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-13-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-13-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-13-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-13-gdb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-gdb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gdb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gdb-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gdb-gdbserver");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gdb-headless");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gdb-minimal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw-binutils-generic");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw32-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw64-binutils");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
script_require_ports("Host/OS/CentOS Linux-8", "Host/OS/Debian Linux-11", "Host/OS/Debian Linux-12", "Host/OS/Debian Linux-13", "Host/OS/Red Hat Enterprise Linux-10", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Debian Linux-12": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "12",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arc-linux-gnu"},
{"reference": "binutils-arc-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa-linux-gnu-dbg"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-ia64-linux-gnu"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"},
{"reference": "libctf-nobfd0"},
{"reference": "libctf-nobfd0-dbg"},
{"reference": "libctf0"},
{"reference": "libctf0-dbg"},
{"reference": "libgprofng0"},
{"reference": "libgprofng0-dbg"}
]
}
]
},
"Debian Linux-11": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "11",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa-linux-gnu-dbg"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-ia64-linux-gnu"},
{"reference": "binutils-ia64-linux-gnu-dbg"},
{"reference": "binutils-m68k-linux-gnu"},
{"reference": "binutils-m68k-linux-gnu-dbg"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"},
{"reference": "libctf-nobfd0"},
{"reference": "libctf-nobfd0-dbg"},
{"reference": "libctf0"},
{"reference": "libctf0-dbg"}
]
}
]
},
"Debian Linux-13": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "13",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arc-linux-gnu"},
{"reference": "binutils-arc-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dbg"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa-linux-gnu-dbg"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"},
{"reference": "libctf-nobfd0"},
{"reference": "libctf-nobfd0-dbg"},
{"reference": "libctf0"},
{"reference": "libctf0-dbg"},
{"reference": "libgprofng0"},
{"reference": "libgprofng0-dbg"},
{"reference": "libsframe1"},
{"reference": "libsframe1-dbg"}
]
}
]
},
"Red Hat Enterprise Linux-10": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "10",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "binutils-gold"},
{"reference": "gcc-toolset-15-binutils"},
{"reference": "gcc-toolset-15-binutils-devel"},
{"reference": "gcc-toolset-15-binutils-gold"},
{"reference": "gcc-toolset-15-binutils-gprofng"},
{"reference": "gdb"},
{"reference": "gdb-doc"},
{"reference": "gdb-gdbserver"},
{"reference": "gdb-headless"},
{"reference": "gdb-minimal"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
},
"CentOS Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "gcc-toolset-13-binutils"},
{"reference": "gcc-toolset-13-binutils-devel"},
{"reference": "gcc-toolset-13-binutils-gold"},
{"reference": "gcc-toolset-13-gdb"},
{"reference": "gcc-toolset-14-binutils"},
{"reference": "gcc-toolset-14-binutils-devel"},
{"reference": "gcc-toolset-14-binutils-gold"},
{"reference": "gcc-toolset-14-binutils-gprofng"},
{"reference": "gcc-toolset-14-gdb"},
{"reference": "gdb"},
{"reference": "gdb-doc"},
{"reference": "gdb-gdbserver"},
{"reference": "gdb-headless"},
{"reference": "mingw-binutils"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
},
"Red Hat Enterprise Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "gcc-toolset-13-binutils"},
{"reference": "gcc-toolset-13-binutils-devel"},
{"reference": "gcc-toolset-13-binutils-gold"},
{"reference": "gcc-toolset-13-gdb"},
{"reference": "gcc-toolset-14-binutils"},
{"reference": "gcc-toolset-14-binutils-devel"},
{"reference": "gcc-toolset-14-binutils-gold"},
{"reference": "gcc-toolset-14-binutils-gprofng"},
{"reference": "gcc-toolset-14-gdb"},
{"reference": "gdb"},
{"reference": "gdb-doc"},
{"reference": "gdb-gdbserver"},
{"reference": "gdb-headless"},
{"reference": "mingw-binutils"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
},
"Red Hat Enterprise Linux-9": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "9",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "binutils-gold"},
{"reference": "gcc-toolset-13-binutils"},
{"reference": "gcc-toolset-13-binutils-devel"},
{"reference": "gcc-toolset-13-binutils-gold"},
{"reference": "gcc-toolset-13-gdb"},
{"reference": "gcc-toolset-14-binutils"},
{"reference": "gcc-toolset-14-binutils-devel"},
{"reference": "gcc-toolset-14-binutils-gold"},
{"reference": "gcc-toolset-14-binutils-gprofng"},
{"reference": "gcc-toolset-15-binutils"},
{"reference": "gcc-toolset-15-binutils-devel"},
{"reference": "gcc-toolset-15-binutils-gold"},
{"reference": "gcc-toolset-15-binutils-gprofng"},
{"reference": "gdb"},
{"reference": "gdb-doc"},
{"reference": "gdb-gdbserver"},
{"reference": "gdb-headless"},
{"reference": "gdb-minimal"},
{"reference": "mingw-binutils"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation