Advisory ROSA-SA-2025-2645

🗓️ 28 Jan 2025 19:08:29Reported by ROSA LABType

rosalinux🔗 abf.rosa.ru👁 41 Views

Multiple vulnerabilities in GNU Binutils resolved; update needed to patch security flaws.

Reporter	Title	Published	Views	Family All 771
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.4-IF001	29 Nov 202320:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to denial of service in GNU Binutils [CVE-2022-44840]	25 Apr 202418:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	20 Aug 202409:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.	6 Oct 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: Order Management is subject to various OS vulnerabilites which could have allowed attacker various entry points into application.	29 Apr 202502:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to denial of service in GNU Binutils [CVE-2022-4285]	25 Apr 202418:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to multiple vulnerabilities	2 Oct 202410:07	–	ibm
FreeBSD	binutils -- Multiple vulnerabilities	25 Aug 202400:00	–	freebsd
attackerkb	CVE-2022-47696	22 Aug 202319:16	–	attackerkb

OS	OS Version	Architecture	Package	Package Version	Filename
ROSA	any	noarch	binutils	2.38	UNKNOWN

28 Jan 2025 19:08Current

7.4High risk

Vulners AI Score7.4

CVSS 3.16.5 - 7.8

EPSS0.00895

SSVC

cve identifier buffer overflow memory access insufficient input validation denial of service.