UBUNTU-CVE-2025-8224

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-8224

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-8224.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2025-8224

Upstream

CVE-2025-8224

Published

2025-07-27T06:15:00Z

Modified

2025-08-26T04:56:04Z

Severity

3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfdelfgetstrsection of the file bfd/elf.c of the component BFD Library. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is db856d41004301b3a56438efd957ef5cabb91530. It is recommended to apply a patch to fix this issue.

References

Affected packages

Ubuntu:Pro:14.04:LTS / binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm6?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.23.52.20130913-0ubuntu1

2.23.90.20131017-1ubuntu1

2.23.90.20131116-1ubuntu1

2.23.91.20131123-1ubuntu1

2.24-1ubuntu1

2.24-1ubuntu2

2.24-2ubuntu1

2.24-2ubuntu2

2.24-2ubuntu3

2.24-4ubuntu1

2.24-5ubuntu1

2.24-5ubuntu2

2.24-5ubuntu3

2.24-5ubuntu3.1

2.24-5ubuntu13

2.24-5ubuntu14

2.24-5ubuntu14.1

2.24-5ubuntu14.2

2.24-5ubuntu14.2+esm1

2.24-5ubuntu14.2+esm2

2.24-5ubuntu14.2+esm3

2.24-5ubuntu14.2+esm5

2.24-5ubuntu14.2+esm6

Ubuntu:Pro:18.04:LTS / binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.9+esm4?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.29.1-4ubuntu1

2.29.1-6ubuntu1

2.29.1-7ubuntu1

2.29.1-8ubuntu1

2.29.1-10ubuntu1

2.29.1-12ubuntu1

2.30-4ubuntu1

2.30-5ubuntu1

2.30-7ubuntu1

2.30-8ubuntu1

2.30-9ubuntu1

2.30-10ubuntu1

2.30-11ubuntu1

2.30-14ubuntu2

2.30-15ubuntu1

2.30-20ubuntu2~18.04

2.30-21ubuntu1~18.04

2.30-21ubuntu1~18.04.1

2.30-21ubuntu1~18.04.2

2.30-21ubuntu1~18.04.3

2.30-21ubuntu1~18.04.4

2.30-21ubuntu1~18.04.5

2.30-21ubuntu1~18.04.7

2.30-21ubuntu1~18.04.8

2.30-21ubuntu1~18.04.9

2.30-21ubuntu1~18.04.9+esm1

2.30-21ubuntu1~18.04.9+esm3

2.30-21ubuntu1~18.04.9+esm4

Ubuntu:Pro:20.04:LTS / binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.34-6ubuntu1.11?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.33-2ubuntu1

2.33.1-1ubuntu1

2.33.1-5ubuntu1

2.33.1-6ubuntu1

2.33.1-6ubuntu3

2.33.90.20200122-1ubuntu2

2.34-1ubuntu1

2.34-3ubuntu1

2.34-4ubuntu1

2.34-5ubuntu1

2.34-6ubuntu1

2.34-6ubuntu1.1

2.34-6ubuntu1.3

2.34-6ubuntu1.4

2.34-6ubuntu1.5

2.34-6ubuntu1.6

2.34-6ubuntu1.7

2.34-6ubuntu1.8

2.34-6ubuntu1.9

2.34-6ubuntu1.10

2.34-6ubuntu1.11

Ubuntu:22.04:LTS / binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.38-4ubuntu2.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.37-7ubuntu1

2.37-9ubuntu1

2.37-10ubuntu1

2.37.50.20220106-2ubuntu1

2.37.90.20220126-0ubuntu1

2.37.90.20220130-0ubuntu2

2.38-1ubuntu1

2.38-2ubuntu1

2.38-3ubuntu1

2.38-4ubuntu2

2.38-4ubuntu2.1

2.38-4ubuntu2.2

2.38-4ubuntu2.3

2.38-4ubuntu2.4

2.38-4ubuntu2.5

2.38-4ubuntu2.6

2.38-4ubuntu2.7

2.38-4ubuntu2.8

Ubuntu:24.04:LTS / binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.42-4ubuntu2.5?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.41-5ubuntu1

2.41-6ubuntu1

2.41.50.20231206-1ubuntu1

2.41.50.20231214-1ubuntu1

2.41.50.20231227-1ubuntu1

2.41.90.20240122-1ubuntu1

2.42-2ubuntu1

2.42-3ubuntu1

2.42-4ubuntu1

2.42-4ubuntu2

2.42-4ubuntu2.3

2.42-4ubuntu2.4

2.42-4ubuntu2.5

Ubuntu:25.04 / binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.44-3ubuntu1?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.43.1-4ubuntu1

2.43.50.20241126-3ubuntu1

2.43.50.20241204-2ubuntu1

2.43.50.20241210-1ubuntu2

2.43.50.20241215-1ubuntu1

2.43.50.20241221-1ubuntu1

2.43.50.20241230-1ubuntu1

2.43.50.20250108-1ubuntu1

2.44-1ubuntu1

2.44-2ubuntu1

2.44-3ubuntu1