https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:30:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02741 bdu:2026-02741 https://cve.radiocsirt.org/vuln/bdu:2026-02741 https://cve.radiocsirt.org/vuln/bell-cve-2025-11840 <p><strong>Affected:</strong> Alpaquita:23: binutils, Alpaquita:25: binutils, Alpaquita:stream: binutils, BellSoft Hardened Containers:23: binutils, BellSoft Hardened Containers:25: binutils, BellSoft Hardened Containers:stream: binutils</p> <p><strong>Affected:</strong> Alpaquita:23: binutils, Alpaquita:25: binutils, Alpaquita:stream: binutils, BellSoft Hardened Containers:23: binutils, BellSoft Hardened Containers:25: binutils, BellSoft Hardened Containers:stream: binutils</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-11840 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0941 certfr-2025-avi-0941 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0941 https://cve.radiocsirt.org/vuln/euvd-2026-336312 EUVD-2026-336312 https://cve.radiocsirt.org/vuln/euvd-2026-336312 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11840 <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.</p> <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11840 https://cve.radiocsirt.org/vuln/ghsa-jp92-pqpq-f69p <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.</p> <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-jp92-pqpq-f69p https://cve.radiocsirt.org/vuln/icsa-25-162-05 <p>sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags. A buffer overflow was discovered in the GNU C Library&#39;s dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment var…</p> <p>sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags. A buffer overflow was discovered in the GNU C Library&#39;s dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment var…</p> https://cve.radiocsirt.org/vuln/icsa-25-162-05 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11840 msrc_CVE-2025-11840 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11840 https://cve.radiocsirt.org/vuln/oesa-2025-2624 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: gdb</p> <p>GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fix(es):</p> <p>A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)</p> <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: gdb</p> <p>GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fix(es):</p> <p>A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)</p> <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2624 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11932-1 <p>binutils-2.47-1.1 on GA media</p> <p>binutils-2.47-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11932-1 https://cve.radiocsirt.org/vuln/rhsa-2026:7098 <p>binutils: GNU Binutils out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds binutils: GNU Binutils Linker out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils prdbg.c tg_tag_type return value binutils: GNU Binutils out-of-bounds read binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c binutils: BinUtils: Denial of Service via crafted PE file binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c binutils: stack overflow in d_print_comp_inner() in cp-demangle.c binutils: BinUtils: Denial of Service via crafted PE file binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information binutils: Binutils objdump: Denial of Service via crafted DWARF debug information binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed h…</p> <p>binutils: GNU Binutils out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds binutils: GNU Binutils Linker out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils prdbg.c tg_tag_type return value binutils: GNU Binutils out-of-bounds read binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c binutils: BinUtils: Denial of Service via crafted PE file binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c binutils: stack overflow in d_print_comp_inner() in cp-demangle.c binutils: BinUtils: Denial of Service via crafted PE file binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information binutils: Binutils objdump: Denial of Service via crafted DWARF debug information binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed h…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:7098 https://cve.radiocsirt.org/vuln/ssa-082556 <p>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.</p> <p>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.</p> https://cve.radiocsirt.org/vuln/ssa-082556 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11840 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils, Ubuntu:22.04:LTS: binutils, Ubuntu:24.04:LTS: binutils, Ubuntu:25.10: binutils</p> <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils, Ubuntu:22.04:LTS: binutils, Ubuntu:24.04:LTS: binutils, Ubuntu:25.10: binutils</p> <p>A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11840 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2327 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2327