USN-7423-1
- Source
- https://ubuntu.com/security/notices/USN-7423-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7423-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/USN-7423-1
- Upstream
- Related
- Published
- 2025-04-07T19:29:37.900434Z
- Modified
- 2025-10-13T04:41:00Z
- Summary
- binutils vulnerabilities
- Details
-
It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash, expose sensitive information or execute arbitrary code. (CVE-2025-1153, CVE-2025-1182)
It was discovered that ld in GNU binutils incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-1176)
It was discovered that ld in GNU binutils incorrectly handled certain files. An attacker could possibly use this issue to cause a crash, expose sensitive information or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-1178, CVE-2025-1181)
- References
Affected packages
Ubuntu:20.04:LTS / binutils
Package
- Name
- binutils
- Purl
- pkg:deb/ubuntu/binutils@2.34-6ubuntu1.11?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.34-6ubuntu1.11
Affected versions
2.*
2.33-2ubuntu1
2.33.1-1ubuntu1
2.33.1-5ubuntu1
2.33.1-6ubuntu1
2.33.1-6ubuntu3
2.33.90.20200122-1ubuntu2
2.34-1ubuntu1
2.34-3ubuntu1
2.34-4ubuntu1
2.34-5ubuntu1
2.34-6ubuntu1
2.34-6ubuntu1.1
2.34-6ubuntu1.3
2.34-6ubuntu1.4
2.34-6ubuntu1.5
2.34-6ubuntu1.6
2.34-6ubuntu1.7
2.34-6ubuntu1.8
2.34-6ubuntu1.9
2.34-6ubuntu1.10
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-aarch64-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-alpha-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-arm-linux-gnueabi"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-arm-linux-gnueabihf"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-common"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-dev"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-for-build"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-for-host"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-hppa-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-hppa64-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-i686-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-i686-kfreebsd-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-i686-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-ia64-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-m68k-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-multiarch"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-multiarch-dev"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-powerpc-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-powerpc64-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-powerpc64le-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-riscv64-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-s390x-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-sh4-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-source"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-sparc64-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-x86-64-kfreebsd-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-x86-64-linux-gnu"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "binutils-x86-64-linux-gnux32"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "libbinutils"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "libctf-nobfd0"
},
{
"binary_version": "2.34-6ubuntu1.11",
"binary_name": "libctf0"
}
]
}
Database specific
{
"cves_map": {
"cves": [
{
"id": "CVE-2025-1153",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-1176",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1178",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1181",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1182",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
}
Ubuntu:22.04:LTS / binutils
Package
- Name
- binutils
- Purl
- pkg:deb/ubuntu/binutils@2.38-4ubuntu2.8?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.38-4ubuntu2.8
Affected versions
2.*
2.37-7ubuntu1
2.37-9ubuntu1
2.37-10ubuntu1
2.37.50.20220106-2ubuntu1
2.37.90.20220126-0ubuntu1
2.37.90.20220130-0ubuntu2
2.38-1ubuntu1
2.38-2ubuntu1
2.38-3ubuntu1
2.38-4ubuntu2
2.38-4ubuntu2.1
2.38-4ubuntu2.2
2.38-4ubuntu2.3
2.38-4ubuntu2.4
2.38-4ubuntu2.5
2.38-4ubuntu2.6
2.38-4ubuntu2.7
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-aarch64-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-alpha-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-arm-linux-gnueabi"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-arm-linux-gnueabihf"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-common"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-dev"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-for-build"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-for-host"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-hppa-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-hppa64-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-i686-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-i686-kfreebsd-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-i686-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-ia64-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-m68k-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-multiarch"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-multiarch-dev"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-powerpc-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-powerpc64-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-powerpc64le-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-riscv64-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-s390x-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-sh4-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-source"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-sparc64-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-x86-64-kfreebsd-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-x86-64-linux-gnu"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "binutils-x86-64-linux-gnux32"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "libbinutils"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "libctf-nobfd0"
},
{
"binary_version": "2.38-4ubuntu2.8",
"binary_name": "libctf0"
}
]
}
Database specific
{
"cves_map": {
"cves": [
{
"id": "CVE-2025-1153",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-1176",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1178",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1181",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1182",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
}
Ubuntu:24.04:LTS / binutils
Package
- Name
- binutils
- Purl
- pkg:deb/ubuntu/binutils@2.42-4ubuntu2.5?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.42-4ubuntu2.5
Affected versions
2.*
2.41-5ubuntu1
2.41-6ubuntu1
2.41.50.20231206-1ubuntu1
2.41.50.20231214-1ubuntu1
2.41.50.20231227-1ubuntu1
2.41.90.20240122-1ubuntu1
2.42-2ubuntu1
2.42-3ubuntu1
2.42-4ubuntu1
2.42-4ubuntu2
2.42-4ubuntu2.3
2.42-4ubuntu2.4
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-aarch64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-alpha-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-arc-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-arm-linux-gnueabi"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-arm-linux-gnueabihf"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-common"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-dev"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-for-build"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-for-host"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-hppa-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-hppa64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-i686-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-i686-kfreebsd-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-i686-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-ia64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-loongarch64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-m68k-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-multiarch"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-multiarch-dev"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-powerpc-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-powerpc64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-powerpc64le-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-riscv64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-s390x-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-sh4-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-source"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-sparc64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-x86-64-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-x86-64-kfreebsd-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-x86-64-linux-gnu"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "binutils-x86-64-linux-gnux32"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "libbinutils"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "libctf-nobfd0"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "libctf0"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "libgprofng0"
},
{
"binary_version": "2.42-4ubuntu2.5",
"binary_name": "libsframe1"
}
]
}
Database specific
{
"cves_map": {
"cves": [
{
"id": "CVE-2025-1153",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-1176",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1178",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1181",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-1182",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:24.04:LTS"
}
}