RockyLinux 10 : binutils (RLSA-2025:20155)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20155 advisory. binutils: GNU Binutils ld elflink.c elfgcsweep memory corruption CVE-2025-5244 Tenable has extracted the preceding description block directly from the RockyLinu...

K000159667: GNU Binutils vulnerabilities CVE-2025-11082 and CVE-2025-11083

Security Advisory Description CVE-2025-11082 A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution...

Azure Linux 3.0 Security Update: binutils (CVE-2025-7545)

The version of binutils installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7545 advisory. - A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is...

Azure Linux 3.0 Security Update: binutils (CVE-2025-7546)

The version of binutils installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7546 advisory. - A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this...

MiracleLinux 8 : binutils-2.30-108.el8.1 (AXSA:2022-2955:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2955:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : binutils-2.30-119.el8.2 (AXSA:2023-6562:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6562:03 advisory. binutils: NULL pointer dereference in bfdelfgetsymbolversionstring leads to segfault CVE-2022-4285 Tenable has extracted the preceding description block...

MiracleLinux 8 : binutils-2.30-125.el8_10 (AXSA:2024-9023:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9023:03 advisory. binutils: heap-based buffer overflow in finishstab in stabs.c CVE-2018-12699 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : binutils-2.35.2-42.el9 (AXSA:2023-6593:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6593:04 advisory. binutils: NULL pointer dereference in bfdelfgetsymbolversionstring leads to segfault CVE-2022-4285 Tenable has extracted the preceding description block...

MiracleLinux 8 : gcc-toolset-11-annobin-9.85-1.el8.1, gcc-toolset-11-binutils-2.36.1-1.el8.1, gcc-toolset-11-gcc-11.2.1-1.2.el8 (AXSA:2021-2882:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2882:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : binutils-2.30-75.el8 (AXSA:2020-361:08)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-361:08 advisory. binutils: integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c CVE-2019-17451 binutils: Improper Input Validation,...

MiracleLinux 7 : binutils-2.27-44.base.el7.1 (AXSA:2021-2508:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2508:04 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : binutils-2.30-79.el8 (AXSA:2021-1090:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1090:01 advisory. binutils: denial of service via crafted ELF file CVE-2019-17450 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : binutils-2.27-41.base.el7 (AXSA:2019-4165:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4165:01 advisory. binutils: integer overflow leads to heap-based buffer overflow in objdump CVE-2018-1000876 binutils: Stack Exhaustion in the demangling functions...

MiracleLinux 8 : binutils-2.30-128.el8_10 (AXSA:2025-11573:05)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11573:05 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 9 : gcc-toolset-13-binutils-2.40-21.el9_7.1 (AXSA:2025-11588:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11588:01 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 8 : binutils-2.30-108.el8 (AXSA:2021-2582:05)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2582:05 advisory. binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c readsection CVE-2021-3487 binutils: Race window allo...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in image_write

Detailed Report: https://oss-fuzz.com/testcase?key=6632654580809728 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x744d199e00bd Crash State: imagewrite bfdvmsslurpet...

MiracleLinux 8 : gcc-toolset-12 Seuciry, Bug Fix, Enhancement update (AXEA:2023-5833:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXEA:2023-5833:01 advisory. - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial o...

binutils:fuzz_objdump_safe: Use-of-uninitialized-value in alpha_ecoff_get_relocated_section_contents

Detailed Report: https://oss-fuzz.com/testcase?key=5534027850514432 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdumpsafe Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: alphaecoffgetrelocatedsectioncontents...

MiracleLinux 7 : binutils-2.23.52.0.1-55.el7 (AXSA:2015-717:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-717:01 advisory. Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof...