Buffer overflow in Binutils - CVE-2025-1182

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU103994

Buffer overflow in Binutils - CVE-2025-1182

Published: February 17, 2025


Vulnerability identifier: #VU103994
CSH Severity: High
CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-1182
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the bfd_elf_reloc_symbol_deleted_p() function in bfd/elflink.c within the ld binary. A remote attacker can pass specially crafted input to the binary, trigger memory corruption and execute arbitrary code on the target system.


Affected software

Binutils
SUSE Manager Retail Branch Server 4.3
SUSE Manager Proxy 4.3
SUSE Manager Server 4.3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE Enterprise Storage
Ubuntu
Development Tools Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
openucx-debugsource
openucx-tools-debuginfo
libucp0-debuginfo
openucx-tools
libucs-devel
libucs0
libucm0-debuginfo
libuct0-debuginfo
libucm0
libuct0-64bit
libucs0-64bit-debuginfo
libucm-devel
libucp0-64bit-debuginfo
libucp0-64bit
libucm0-64bit-debuginfo
libucs0-64bit
libuct0
libuct0-64bit-debuginfo
libucp-devel
libucs0-debuginfo
libucm0-64bit
libuct-devel
libucp0
openucx-debuginfo
binutils (Ubuntu package)
binutils-multiarch (Ubuntu package)
cross-spu-binutils
cross-riscv64-binutils-debuginfo
cross-epiphany-binutils
cross-rx-binutils-debuginfo
cross-epiphany-binutils-debugsource
cross-pru-binutils
cross-arm-binutils-debuginfo
cross-arm-binutils
cross-bpf-binutils-debuginfo
cross-pru-binutils-debugsource
cross-sparc64-binutils-debugsource
cross-hppa64-binutils-debuginfo
cross-hppa-binutils-debuginfo
cross-rx-binutils-debugsource
cross-ia64-binutils
cross-spu-binutils-debugsource
cross-ppc-binutils
cross-sparc64-binutils
libctf-nobfd0
cross-m68k-binutils-debugsource
cross-hppa-binutils
binutils-devel
cross-ppc-binutils-debuginfo
cross-ia64-binutils-debugsource
cross-s390x-binutils
cross-s390x-binutils-debuginfo
cross-ppc64le-binutils-debuginfo
cross-ppc64le-binutils
cross-ppc64le-binutils-debugsource
cross-aarch64-binutils-debugsource
cross-aarch64-binutils
cross-aarch64-binutils-debuginfo
binutils-devel-32bit
cross-sparc64-binutils-debuginfo
cross-avr-binutils-debuginfo
cross-m68k-binutils
cross-ia64-binutils-debuginfo
cross-arm-binutils-debugsource
cross-spu-binutils-debuginfo
cross-bpf-binutils-debugsource
libctf0-debuginfo
cross-sparc-binutils-debuginfo
binutils-debugsource
cross-riscv64-binutils-debugsource
cross-ppc64-binutils
cross-mips-binutils-debuginfo
cross-sparc-binutils-debugsource
cross-rx-binutils
cross-bpf-binutils
cross-i386-binutils-debugsource
libctf-nobfd0-debuginfo
cross-xtensa-binutils-debugsource
cross-xtensa-binutils
cross-s390-binutils
cross-avr-binutils-debugsource
cross-riscv64-binutils
cross-mips-binutils
cross-hppa-binutils-debugsource
cross-ppc64-binutils-debuginfo
cross-avr-binutils
cross-s390x-binutils-debugsource
cross-x86_64-binutils-debuginfo
cross-x86_64-binutils
cross-x86_64-binutils-debugsource
cross-ppc64-binutils-debugsource
binutils
libctf0
cross-s390-binutils-debuginfo
cross-hppa64-binutils
cross-m68k-binutils-debuginfo
cross-s390-binutils-debugsource
cross-ppc-binutils-debugsource
cross-mips-binutils-debugsource
cross-sparc-binutils
binutils-debuginfo
cross-hppa64-binutils-debugsource
cross-pru-binutils-debuginfo
cross-i386-binutils-debuginfo
cross-xtensa-binutils-debuginfo
cross-i386-binutils
cross-epiphany-binutils-debuginfo
gprofng
gprofng-debuginfo
perf-debuginfo
perf-debugsource
perf
perf-devel
perf-bash-completion
perf-gtk-debuginfo
perf-gtk
bpftool-debugsource
bpftool-debuginfo
bpftool-bash-completion
bpftool

How to mitigate CVE-2025-1182

Install updates from vendor's website.

Binutils - update to 2.44
openucx-debugsource - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-tools-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-tools - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libuct0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libuct-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-debuginfo - addressed in versions 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
binutils (Ubuntu package) - addressed in versions 2.24-5ubuntu14.2+esm7, 2.26.1-1ubuntu1~16.04.8+esm13, 2.30-21ubuntu1~18.04.9+esm5, 2.34-6ubuntu1.11, 2.34-6ubuntu1.11+esm1, 2.38-4ubuntu2.8, 2.38-4ubuntu2.10, 2.38-4ubuntu2.11, 2.42-4ubuntu2.5, 2.42-4ubuntu2.6, 2.42-4ubuntu2.7, 2.43.1-4ubuntu1.2, 2.44-3ubuntu1.1, 2.44-3ubuntu1.2, 2.45-7ubuntu1.1
binutils-multiarch (Ubuntu package) - addressed in versions 2.34-6ubuntu1.11, 2.38-4ubuntu2.8, 2.42-4ubuntu2.5, 2.43.1-4ubuntu1.2
cross-spu-binutils - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-epiphany-binutils - update to 2.45-150100.7.57.1
cross-rx-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils - update to 2.45-150100.7.57.1
cross-arm-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils - update to 2.45-150100.7.57.1
cross-bpf-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-pru-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-hppa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-rx-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils - update to 2.45-150100.7.57.1
cross-spu-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc-binutils - update to 2.45-150100.7.57.1
cross-sparc64-binutils - update to 2.45-150100.7.57.1
libctf-nobfd0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-m68k-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa-binutils - update to 2.45-150100.7.57.1
binutils-devel - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-ppc-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ia64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-s390x-binutils - update to 2.45-150100.7.57.1
cross-s390x-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc64le-binutils - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debugsource - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-aarch64-binutils - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-devel-32bit - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-avr-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-m68k-binutils - update to 2.45-150100.7.57.1
cross-ia64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils-debugsource - update to 2.45-150100.7.57.1
cross-spu-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-bpf-binutils-debugsource - update to 2.45-150100.7.57.1
libctf0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-sparc-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-debugsource - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-riscv64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils - update to 2.45-150100.7.57.1
cross-mips-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-rx-binutils - update to 2.45-150100.7.57.1
cross-bpf-binutils - update to 2.45-150100.7.57.1
cross-i386-binutils-debugsource - update to 2.45-150100.7.57.1
libctf-nobfd0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-xtensa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-xtensa-binutils - update to 2.45-150100.7.57.1
cross-s390-binutils - update to 2.45-150100.7.57.1
cross-avr-binutils-debugsource - update to 2.45-150100.7.57.1
cross-riscv64-binutils - update to 2.45-150100.7.57.1
cross-mips-binutils - update to 2.45-150100.7.57.1
cross-hppa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-avr-binutils - update to 2.45-150100.7.57.1
cross-s390x-binutils-debugsource - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-x86_64-binutils - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debugsource - update to 2.45-150100.7.57.1
binutils - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
libctf0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-s390-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-hppa64-binutils - update to 2.45-150100.7.57.1
cross-m68k-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc-binutils - update to 2.45-150100.7.57.1
binutils-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-i386-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-xtensa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-i386-binutils - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debuginfo - update to 2.45-150100.7.57.1
gprofng - update to 2.45-160000.1.1
gprofng-debuginfo - update to 2.45-160000.1.1
perf-debuginfo - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-debugsource - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-devel - addressed in versions 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-bash-completion - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk-debuginfo - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
bpftool-debugsource - update to 7.5.0-160000.2.3
bpftool-debuginfo - update to 7.5.0-160000.2.3
bpftool-bash-completion - update to 7.5.0-160000.2.3
bpftool - update to 7.5.0-160000.2.3

External References

Related Security Bulletins