Memory leak in Binutils - CVE-2025-3198

Vulnerability identifier: #VU107136

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-3198

CWE-ID: CWE-401

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform DoS attack on the target system.

The vulnerability exists due memory leak within the display_info() function in binutils/bucomm.c. A remote attacker can force the application to leak memory and perform denial of service attack.

Binutils
SUSE Manager Proxy 4.3
SUSE Linux Enterprise Server 15 SP3
SUSE Manager Server 4.3
SUSE Linux Enterprise Server 15 SP5
SUSE Manager Retail Branch Server 4.3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Ubuntu
SUSE Package Hub 15
Development Tools Module
Basesystem Module
openSUSE Leap
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
openEuler
Anolis OS
libuct0-debuginfo
libucp0-64bit-debuginfo
libucs0-64bit-debuginfo
libuct0-64bit
libucm0
libucs-devel
openucx-tools-debuginfo
libucp0-debuginfo
openucx-tools
libucm0-debuginfo
libucs0
libucm-devel
openucx-debugsource
libuct0
libucp-devel
libucs0-debuginfo
libuct-devel
libucp0
libucm0-64bit
libuct0-64bit-debuginfo
libucp0-64bit
libucm0-64bit-debuginfo
libucs0-64bit
openucx-debuginfo
binutils (Ubuntu package)
binutils-doc
binutils
binutils-gold
binutils-devel
binutils-debuginfo
binutils-help
binutils-debugsource
cross-spu-binutils
cross-riscv64-binutils-debuginfo
cross-epiphany-binutils
cross-rx-binutils-debuginfo
cross-epiphany-binutils-debugsource
cross-pru-binutils
cross-arm-binutils-debuginfo
cross-arm-binutils
cross-bpf-binutils-debuginfo
cross-pru-binutils-debugsource
cross-sparc64-binutils-debugsource
cross-sparc-binutils-debuginfo
cross-hppa-binutils-debuginfo
cross-rx-binutils-debugsource
cross-ia64-binutils
cross-spu-binutils-debugsource
cross-ppc-binutils
cross-sparc64-binutils
libctf-nobfd0
cross-m68k-binutils-debugsource
cross-hppa-binutils
cross-ppc-binutils-debuginfo
cross-ia64-binutils-debugsource
cross-s390x-binutils
cross-s390x-binutils-debuginfo
cross-ppc64le-binutils-debuginfo
cross-ppc64le-binutils
cross-ppc64le-binutils-debugsource
cross-aarch64-binutils-debugsource
cross-aarch64-binutils
cross-aarch64-binutils-debuginfo
binutils-devel-32bit
cross-sparc64-binutils-debuginfo
cross-avr-binutils-debuginfo
cross-m68k-binutils
cross-ia64-binutils-debuginfo
cross-arm-binutils-debugsource
cross-spu-binutils-debuginfo
cross-bpf-binutils-debugsource
libctf0-debuginfo
cross-hppa64-binutils-debuginfo
cross-riscv64-binutils-debugsource
cross-ppc64-binutils
cross-mips-binutils-debuginfo
cross-sparc-binutils-debugsource
cross-rx-binutils
cross-bpf-binutils
cross-i386-binutils-debugsource
libctf-nobfd0-debuginfo
cross-xtensa-binutils-debugsource
cross-xtensa-binutils
cross-s390-binutils
cross-avr-binutils-debugsource
cross-riscv64-binutils
cross-mips-binutils
cross-hppa-binutils-debugsource
cross-ppc64-binutils-debuginfo
cross-avr-binutils
cross-s390x-binutils-debugsource
cross-x86_64-binutils-debuginfo
cross-x86_64-binutils
cross-x86_64-binutils-debugsource
cross-ppc64-binutils-debugsource
libctf0
cross-s390-binutils-debuginfo
cross-hppa64-binutils
cross-m68k-binutils-debuginfo
cross-s390-binutils-debugsource
cross-ppc-binutils-debugsource
cross-mips-binutils-debugsource
cross-sparc-binutils
cross-hppa64-binutils-debugsource
cross-pru-binutils-debuginfo
cross-i386-binutils-debuginfo
cross-xtensa-binutils-debuginfo
cross-i386-binutils
cross-epiphany-binutils-debuginfo
gprofng
gprofng-debuginfo
perf-debuginfo
perf-debugsource
perf
perf-devel
perf-bash-completion
perf-gtk-debuginfo
perf-gtk
bpftool-debugsource
bpftool-debuginfo
bpftool-bash-completion
bpftool

Install updates from vendor's website.

Binutils - update to 2.45
libuct0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libuct0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-tools-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-tools - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-debugsource - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libuct0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
openucx-debuginfo - addressed in versions 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
binutils (Ubuntu package) - addressed in versions 2.24-5ubuntu14.2+esm7, 2.26.1-1ubuntu1~16.04.8+esm13, 2.30-21ubuntu1~18.04.9+esm5, 2.34-6ubuntu1.11+esm1, 2.38-4ubuntu2.10, 2.38-4ubuntu2.11, 2.42-4ubuntu2.6, 2.42-4ubuntu2.7, 2.44-3ubuntu1.1, 2.44-3ubuntu1.2, 2.45-7ubuntu1.1
binutils-doc - update to 2.41-7
binutils - update to 2.41-7
binutils-gold - update to 2.41-7
binutils-devel - update to 2.41-7
binutils-debuginfo - update to 2.41-15
binutils-help - update to 2.41-15
binutils-devel - update to 2.41-15
binutils - update to 2.41-15
binutils-debugsource - update to 2.41-15
cross-spu-binutils - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-epiphany-binutils - update to 2.45-150100.7.57.1
cross-rx-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils - update to 2.45-150100.7.57.1
cross-arm-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils - update to 2.45-150100.7.57.1
cross-bpf-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-pru-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-hppa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-rx-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils - update to 2.45-150100.7.57.1
cross-spu-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc-binutils - update to 2.45-150100.7.57.1
cross-sparc64-binutils - update to 2.45-150100.7.57.1
libctf-nobfd0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-m68k-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa-binutils - update to 2.45-150100.7.57.1
binutils-devel - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-ppc-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ia64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-s390x-binutils - update to 2.45-150100.7.57.1
cross-s390x-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc64le-binutils - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debugsource - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-aarch64-binutils - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-devel-32bit - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-avr-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-m68k-binutils - update to 2.45-150100.7.57.1
cross-ia64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils-debugsource - update to 2.45-150100.7.57.1
cross-spu-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-bpf-binutils-debugsource - update to 2.45-150100.7.57.1
libctf0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
binutils-debugsource - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils - update to 2.45-150100.7.57.1
cross-mips-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-rx-binutils - update to 2.45-150100.7.57.1
cross-bpf-binutils - update to 2.45-150100.7.57.1
cross-i386-binutils-debugsource - update to 2.45-150100.7.57.1
libctf-nobfd0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-xtensa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-xtensa-binutils - update to 2.45-150100.7.57.1
cross-s390-binutils - update to 2.45-150100.7.57.1
cross-avr-binutils-debugsource - update to 2.45-150100.7.57.1
cross-riscv64-binutils - update to 2.45-150100.7.57.1
cross-mips-binutils - update to 2.45-150100.7.57.1
cross-hppa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-avr-binutils - update to 2.45-150100.7.57.1
cross-s390x-binutils-debugsource - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-x86_64-binutils - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debugsource - update to 2.45-150100.7.57.1
binutils - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
libctf0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-s390-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-hppa64-binutils - update to 2.45-150100.7.57.1
cross-m68k-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc-binutils - update to 2.45-150100.7.57.1
binutils-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-i386-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-xtensa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-i386-binutils - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debuginfo - update to 2.45-150100.7.57.1
gprofng - update to 2.45-160000.1.1
gprofng-debuginfo - update to 2.45-160000.1.1
perf-debuginfo - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-debugsource - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-devel - addressed in versions 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-bash-completion - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk-debuginfo - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
bpftool-debugsource - update to 7.5.0-160000.2.3
bpftool-debuginfo - update to 7.5.0-160000.2.3
bpftool-bash-completion - update to 7.5.0-160000.2.3
bpftool - update to 7.5.0-160000.2.3

• https://sourceware.org/bugzilla/show_bug.cgi?id=32716
• https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d
• https://vuldb.com/?ctiid.303151

• Memory leak in GNU Binutils
• openEuler update for binutils
• Anolis OS update for binutils
• Ubuntu update for binutils
• SUSE update for binutils
• Ubuntu update for binutils
• SUSE update for binutils