CVE-2025-1178

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-1178
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-1178.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-1178
Related
Published
2025-02-11T07:15:29Z
Modified
2025-02-11T17:51:07.270857Z
Summary
[none]
Details

A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue.

References

Affected packages

Debian:11 / binutils

Package

Name
binutils
Purl
pkg:deb/debian/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.35.2-2
2.35.50.20201103-1
2.35.50.20201125-1
2.35.50.20201206-1
2.35.50.20201209-1
2.35.50.20201218-1
2.35.50.20210106-1
2.35.90.20210113-1
2.35.90.20210120-1
2.36-1
2.36-2
2.36-2+2.35.2
2.36-2+2.35.2.1
2.36+2.35.2-1
2.36.1-1
2.36.1-2
2.36.1-3
2.36.1-4
2.36.1-5
2.36.1-6
2.36.50.20210601-1
2.36.50.20210618-1
2.36.50.20210628-1
2.36.90.20210705-1
2.37-1
2.37-2
2.37-3
2.37-4
2.37-5
2.37-6
2.37-7
2.37-8
2.37-9
2.37-10
2.37-10.1
2.37.50.20211102-1
2.37.50.20211115-1
2.37.50.20211118-1
2.37.50.20211201-1
2.37.50.20220106-1
2.37.50.20220106-2
2.37.50.20220121-1
2.37.90.20220123-1
2.37.90.20220123-2
2.37.90.20220130-1
2.37.90.20220130-2
2.37.90.20220207-1
2.38-1
2.38-2
2.38-3
2.38-4
2.38.50.20220503-1
2.38.50.20220509-1
2.38.50.20220512-1
2.38.50.20220527-1
2.38.50.20220527-2
2.38.50.20220609-1
2.38.50.20220609-2
2.38.50.20220615-1
2.38.50.20220615-2
2.38.50.20220615-3
2.38.50.20220615-4
2.38.50.20220622-1
2.38.50.20220627-1
2.38.50.20220629-1
2.38.50.20220629-2
2.38.50.20220629-3
2.38.50.20220629-4
2.38.50.20220707-1
2.38.90.20220713-1
2.38.90.20220713-2
2.39-1
2.39-2
2.39-3
2.39-4
2.39-5
2.39-6
2.39-7
2.39-8
2.39.50.20221004-1
2.39.50.20221010-1
2.39.50.20221101-1
2.39.50.20221101-2
2.39.50.20221116-1
2.39.50.20221129-1
2.39.50.20221208-1
2.39.50.20221208-2
2.39.50.20221208-3
2.39.50.20221208-4
2.39.50.20221208-5
2.39.50.20221224-1
2.39.90.20221231-1
2.39.90.20230104-1
2.39.90.20230110-1
2.40-1
2.40-2
2.40.50.20230111-1
2.40.50.20230215-1
2.40.50.20230501-1
2.40.50.20230510-1
2.40.50.20230602-1
2.40.50.20230611-1
2.40.50.20230611-2
2.40.50.20230622-1
2.40.50.20230625-1
2.40.50.20230630-1
2.40.90.20230705-1
2.40.90.20230714-1
2.40.90.20230714-2
2.40.90.20230720-1
2.40.90.20230729-1
2.40.90.20230729-2
2.41-1
2.41-2
2.41-3
2.41-4
2.41-5
2.41-6
2.41-7
2.41.50.20230731-1
2.41.50.20230803-1
2.41.50.20230905-1
2.41.50.20231010-1
2.41.50.20231101-1
2.41.50.20231125-1
2.41.50.20231202-1
2.41.50.20231206-1
2.41.50.20231214-1
2.41.50.20231227-1
2.41.90.20240115-1
2.41.90.20240122-1
2.42-1
2.42-2
2.42-2+hurd.1
2.42-3
2.42-4
2.42.50.20240614-1
2.42.50.20240618-1
2.42.50.20240625-1
2.42.50.20240710-1
2.42.90.20240720-1
2.42.90.20240720-2
2.43-1
2.43-2
2.43.1-1
2.43.1-2
2.43.1-3
2.43.1-4
2.43.1-5
2.43.50.20240817-1
2.43.50.20240909-1
2.43.50.20241004-1
2.43.50.20241112-1
2.43.50.20241126-1
2.43.50.20241126-2
2.43.50.20241126-3
2.43.50.20241204-1
2.43.50.20241204-2
2.43.50.20241210-1
2.43.50.20241215-1
2.43.50.20241221-1
2.43.50.20241230-1
2.43.50.20250108-1
2.43.90.20250122-1
2.43.90.20250122-2
2.43.90.20250127-1
2.43.90.20250202-1
2.44-1
2.44.50.20250201-1
2.44.50.20250207-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / binutils

Package

Name
binutils
Purl
pkg:deb/debian/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.40-2
2.40.50.20230111-1
2.40.50.20230215-1
2.40.50.20230501-1
2.40.50.20230510-1
2.40.50.20230602-1
2.40.50.20230611-1
2.40.50.20230611-2
2.40.50.20230622-1
2.40.50.20230625-1
2.40.50.20230630-1
2.40.90.20230705-1
2.40.90.20230714-1
2.40.90.20230714-2
2.40.90.20230720-1
2.40.90.20230729-1
2.40.90.20230729-2
2.41-1
2.41-2
2.41-3
2.41-4
2.41-5
2.41-6
2.41-7
2.41.50.20230731-1
2.41.50.20230803-1
2.41.50.20230905-1
2.41.50.20231010-1
2.41.50.20231101-1
2.41.50.20231125-1
2.41.50.20231202-1
2.41.50.20231206-1
2.41.50.20231214-1
2.41.50.20231227-1
2.41.90.20240115-1
2.41.90.20240122-1
2.42-1
2.42-2
2.42-2+hurd.1
2.42-3
2.42-4
2.42.50.20240614-1
2.42.50.20240618-1
2.42.50.20240625-1
2.42.50.20240710-1
2.42.90.20240720-1
2.42.90.20240720-2
2.43-1
2.43-2
2.43.1-1
2.43.1-2
2.43.1-3
2.43.1-4
2.43.1-5
2.43.50.20240817-1
2.43.50.20240909-1
2.43.50.20241004-1
2.43.50.20241112-1
2.43.50.20241126-1
2.43.50.20241126-2
2.43.50.20241126-3
2.43.50.20241204-1
2.43.50.20241204-2
2.43.50.20241210-1
2.43.50.20241215-1
2.43.50.20241221-1
2.43.50.20241230-1
2.43.50.20250108-1
2.43.90.20250122-1
2.43.90.20250122-2
2.43.90.20250127-1
2.43.90.20250202-1
2.44-1
2.44.50.20250201-1
2.44.50.20250207-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / binutils

Package

Name
binutils
Purl
pkg:deb/debian/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.40-2
2.40.50.20230111-1
2.40.50.20230215-1
2.40.50.20230501-1
2.40.50.20230510-1
2.40.50.20230602-1
2.40.50.20230611-1
2.40.50.20230611-2
2.40.50.20230622-1
2.40.50.20230625-1
2.40.50.20230630-1
2.40.90.20230705-1
2.40.90.20230714-1
2.40.90.20230714-2
2.40.90.20230720-1
2.40.90.20230729-1
2.40.90.20230729-2
2.41-1
2.41-2
2.41-3
2.41-4
2.41-5
2.41-6
2.41-7
2.41.50.20230731-1
2.41.50.20230803-1
2.41.50.20230905-1
2.41.50.20231010-1
2.41.50.20231101-1
2.41.50.20231125-1
2.41.50.20231202-1
2.41.50.20231206-1
2.41.50.20231214-1
2.41.50.20231227-1
2.41.90.20240115-1
2.41.90.20240122-1
2.42-1
2.42-2
2.42-2+hurd.1
2.42-3
2.42-4
2.42.50.20240614-1
2.42.50.20240618-1
2.42.50.20240625-1
2.42.50.20240710-1
2.42.90.20240720-1
2.42.90.20240720-2
2.43-1
2.43-2
2.43.1-1
2.43.1-2
2.43.1-3
2.43.1-4
2.43.1-5
2.43.50.20240817-1
2.43.50.20240909-1
2.43.50.20241004-1
2.43.50.20241112-1
2.43.50.20241126-1
2.43.50.20241126-2
2.43.50.20241126-3
2.43.50.20241204-1
2.43.50.20241204-2
2.43.50.20241210-1
2.43.50.20241215-1
2.43.50.20241221-1
2.43.50.20241230-1
2.43.50.20250108-1
2.43.90.20250122-1
2.43.90.20250122-2
2.43.90.20250127-1
2.43.90.20250202-1
2.44-1
2.44.50.20250201-1
2.44.50.20250207-1

Ecosystem specific

{
    "urgency": "unimportant"
}