https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:47:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-16073 bdu:2025-16073 https://cve.radiocsirt.org/vuln/bdu:2025-16073 https://cve.radiocsirt.org/vuln/bell-cve-2025-11494 <p><strong>Affected:</strong> Alpaquita:23: binutils, Alpaquita:25: binutils, Alpaquita:stream: binutils, BellSoft Hardened Containers:23: binutils, BellSoft Hardened Containers:25: binutils, BellSoft Hardened Containers:stream: binutils</p> <p><strong>Affected:</strong> Alpaquita:23: binutils, Alpaquita:25: binutils, Alpaquita:stream: binutils, BellSoft Hardened Containers:23: binutils, BellSoft Hardened Containers:25: binutils, BellSoft Hardened Containers:stream: binutils</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-11494 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0112 certfr-2026-avi-0112 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0112 https://cve.radiocsirt.org/vuln/euvd-2026-336309 EUVD-2026-336309 https://cve.radiocsirt.org/vuln/euvd-2026-336309 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11494 <p>A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.</p> <p>A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11494 https://cve.radiocsirt.org/vuln/ghsa-g3q3-pmmg-p6p8 <p>A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.</p> <p>A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-g3q3-pmmg-p6p8 https://cve.radiocsirt.org/vuln/icsa-25-162-05 <p>sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags. A buffer overflow was discovered in the GNU C Library&#39;s dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment var…</p> <p>sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags. A buffer overflow was discovered in the GNU C Library&#39;s dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment var…</p> https://cve.radiocsirt.org/vuln/icsa-25-162-05 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11494 msrc_CVE-2025-11494 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11494 https://cve.radiocsirt.org/vuln/oesa-2025-2412 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: gdb</p> <p>GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fix(es):</p> <p>A critical vulnerability was found in GNU Binutils version 2.45. This vulnerability is classified as CWE-122 heap-based buffer overflow. A heap overflow condition is a buffer overflow where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Impacted are confidentiality, integrity, and availability. The exploit is available at sourceware.org and is declared as proof-of-concept. The code maintainer replied with &amp;quot;[f]ixed for 2.46&amp;quot;. Applying the patch ea1a0737c7692737a644af极速时时彩0486b71e4a392极速时时彩cbca8 is able to eliminate this problem. The bugfix is ready for download at sourceware.org.(CVE-2025-11082)</p> <p>A vulnerability classified as problematic was found in GNU Binutils 2.45. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect availability. It is possible to download the exploit at sourceware.org. It is declared as proof-of-concept. Applying the patch b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a is able to eliminate this problem. The bugfix is ready for download at sourceware.org.(CVE-2025-11494)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: gdb</p> <p>GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fix(es):</p> <p>A critical vulnerability was found in GNU Binutils version 2.45. This vulnerability is classified as CWE-122 heap-based buffer overflow. A heap overflow condition is a buffer overflow where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Impacted are confidentiality, integrity, and availability. The exploit is available at sourceware.org and is declared as proof-of-concept. The code maintainer replied with &amp;quot;[f]ixed for 2.46&amp;quot;. Applying the patch ea1a0737c7692737a644af极速时时彩0486b71e4a392极速时时彩cbca8 is able to eliminate this problem. The bugfix is ready for download at sourceware.org.(CVE-2025-11082)</p> <p>A vulnerability classified as problematic was found in GNU Binutils 2.45. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect availability. It is possible to download the exploit at sourceware.org. It is declared as proof-of-concept. Applying the patch b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a is able to eliminate this problem. The bugfix is ready for download at sourceware.org.(CVE-2025-11494)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2412 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15651-1 <p>binutils-2.45-1.2 on GA media</p> <p>binutils-2.45-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15651-1 https://cve.radiocsirt.org/vuln/rhsa-2026:7098 <p>binutils: GNU Binutils out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds binutils: GNU Binutils Linker out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils prdbg.c tg_tag_type return value binutils: GNU Binutils out-of-bounds read binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c binutils: BinUtils: Denial of Service via crafted PE file binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c binutils: stack overflow in d_print_comp_inner() in cp-demangle.c binutils: BinUtils: Denial of Service via crafted PE file binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information binutils: Binutils objdump: Denial of Service via crafted DWARF debug information binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed h…</p> <p>binutils: GNU Binutils out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds binutils: GNU Binutils Linker out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils prdbg.c tg_tag_type return value binutils: GNU Binutils out-of-bounds read binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c binutils: BinUtils: Denial of Service via crafted PE file binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c binutils: stack overflow in d_print_comp_inner() in cp-demangle.c binutils: BinUtils: Denial of Service via crafted PE file binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information binutils: Binutils objdump: Denial of Service via crafted DWARF debug information binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed h…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:7098 https://cve.radiocsirt.org/vuln/ssa-082556 <p>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.</p> <p>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.</p> https://cve.radiocsirt.org/vuln/ssa-082556 https://cve.radiocsirt.org/vuln/suse-su-2025:21195-1 <p>Security update for binutils</p> <p>Security update for binutils</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21195-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11494 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils, Ubuntu:22.04:LTS: binutils, Ubuntu:24.04:LTS: binutils, Ubuntu:25.10: binutils</p> <p>A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils, Ubuntu:22.04:LTS: binutils, Ubuntu:24.04:LTS: binutils, Ubuntu:25.10: binutils</p> <p>A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11494 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2241 <p>Ein lokaler Angreifer kann eine Schwachstelle in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2241