CVE-2025-1147: Buffer Copy without Checking Size of Input

A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function sanitizer::internalstrlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launched...

GNU Binutils 缓冲区错误漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

GNU Binutils 安全漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

GNU Binutils 安全漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

CVE-2025-1153: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfdsetformat of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The...

CVE-2025-1151: Missing Release of Memory after Effective Lifetime

A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The...

CVE-2025-1148: Missing Release of Memory after Effective Lifetime

A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function linkorderscan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high...

PT-2025-6895

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192 Description: A critical issue was found in GNU elfutils. This affects the process symtab function of the readelf.c file in the eu-readelf component. The manipulation of the D/a argument leads to a buffer overflow...

USN-7259-1: GNU C Library vulnerability

It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : GNU C Library vulnerability (USN-7259-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7259-1 advisory. It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could...

CVE-2024-52867

guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns e.g., for setuid and setgid programs are properly addressed. The vulnerability can be remediated within the product via certain pull, reconfigure, a...

PT-2025-6161

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A critical issue affects the function bfd elf gc mark rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The...

PT-2025-6053

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A critical vulnerability was found in GNU Binutils, affecting the function bfd elf gc mark rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be...

PT-2025-6050

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A vulnerability was found in GNU Binutils, affecting the function bfd putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely, but...

PT-2025-6051

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A critical issue has been found in GNU Binutils, affecting the function bfd putl64 of the file bfd/libbfd.c of the component ld. This issue leads to memory corruption and can be exploited remotely, althoug...

PT-2025-6054

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A critical vulnerability was found in GNU Binutils, affecting the function bfd elf reloc symbol deleted p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is...

Checkmk 2.3.0p2 / NagVis 1.9.40 Shell Upload

The NagVis component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP. KL-001-2025-002: Checkmk NagVis Remote Code...

Checkmk NagVis Remote Code Execution

Vulnerability Details Affected Vendor: Checkmk Affected Product: Checkmk/NagVis Affected Version: Checkmk 2.3.0p2, NagVis 1.9.40 Platform: GNU/Linux CWE Classification: CWE-434: Unrestricted Upload of File with Dangerous Type CVE ID: CVE-2024-13723 2. Vulnerability Description The "NagVis"...

Checkmk NagVis Reflected Cross-site Scripting

Vulnerability Details Affected Vendor: Checkmk Affected Product: Checkmk/NagVis Affected Version: Checkmk 2.3.0p2, NagVis 1.9.40 Platform: GNU/Linux CWE Classification: CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVE ID: CVE-2024-13722 2...

The vulnerability of the `assert` function in the GNU C Library is related to incorrect calculations of the size of the buffer allocated. This vulnerability allows an attacker to compromise the accessibility of the protected information.

The vulnerability of the assert function in the GNU C Library is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...