CVE-2025-0840
GNU Binutils objdump.c disassemble_bytes stack-based overflow
Severity Score
6.3
*CVSS v4
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
Es wurde eine problematische Schwachstelle in GNU Binutils bis 2.43 gefunden. Es geht dabei um die Funktion disassemble_bytes der Datei binutils/objdump.c. Dank der Manipulation des Arguments buf mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Die Komplexität eines Angriffs ist eher hoch. Sie ist schwierig auszunutzen. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 2.44 vermag dieses Problem zu lösen. Der Patch wird als baac6c221e9d69335bf41366a1c7d87d8ab2f893 bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
*Credits:
wenjusun
CVSS Scores
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
System
Vulnerable | Subsequent
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2025-01-29 CVE Reserved
- 2025-01-29 CVE Published
- 2025-01-30 EPSS Updated
- 2025-02-12 CVE Updated
- 2025-02-12 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-121: Stack-based Buffer Overflow
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| https://sourceware.org/bugzilla/show_bug.cgi?id=32560 | Issue Tracking | |
| https://vuldb.com/?id.293997 | Technical Description | |
| https://vuldb.com/?submit.485255 | Third Party Advisory | |
| https://www.gnu.org | Product |
| URL | Date | SRC |
|---|---|---|
| https://sourceware.org/bugzilla/attachment.cgi?id=15882 | 2025-02-12 |
| URL | Date | SRC |
|---|---|---|
| https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893 | 2025-01-29 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.0 Search vendor "GNU" for product "Binutils" and version "2.0" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.1 Search vendor "GNU" for product "Binutils" and version "2.1" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.2 Search vendor "GNU" for product "Binutils" and version "2.2" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.3 Search vendor "GNU" for product "Binutils" and version "2.3" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.4 Search vendor "GNU" for product "Binutils" and version "2.4" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.5 Search vendor "GNU" for product "Binutils" and version "2.5" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.6 Search vendor "GNU" for product "Binutils" and version "2.6" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.7 Search vendor "GNU" for product "Binutils" and version "2.7" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.8 Search vendor "GNU" for product "Binutils" and version "2.8" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.9 Search vendor "GNU" for product "Binutils" and version "2.9" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.10 Search vendor "GNU" for product "Binutils" and version "2.10" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.11 Search vendor "GNU" for product "Binutils" and version "2.11" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.12 Search vendor "GNU" for product "Binutils" and version "2.12" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.13 Search vendor "GNU" for product "Binutils" and version "2.13" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.14 Search vendor "GNU" for product "Binutils" and version "2.14" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.15 Search vendor "GNU" for product "Binutils" and version "2.15" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.16 Search vendor "GNU" for product "Binutils" and version "2.16" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.17 Search vendor "GNU" for product "Binutils" and version "2.17" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.18 Search vendor "GNU" for product "Binutils" and version "2.18" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.19 Search vendor "GNU" for product "Binutils" and version "2.19" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.20 Search vendor "GNU" for product "Binutils" and version "2.20" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.21 Search vendor "GNU" for product "Binutils" and version "2.21" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.22 Search vendor "GNU" for product "Binutils" and version "2.22" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.23 Search vendor "GNU" for product "Binutils" and version "2.23" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.24 Search vendor "GNU" for product "Binutils" and version "2.24" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.25 Search vendor "GNU" for product "Binutils" and version "2.25" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.26 Search vendor "GNU" for product "Binutils" and version "2.26" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.27 Search vendor "GNU" for product "Binutils" and version "2.27" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.28 Search vendor "GNU" for product "Binutils" and version "2.28" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.29 Search vendor "GNU" for product "Binutils" and version "2.29" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.30 Search vendor "GNU" for product "Binutils" and version "2.30" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.31 Search vendor "GNU" for product "Binutils" and version "2.31" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.32 Search vendor "GNU" for product "Binutils" and version "2.32" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.33 Search vendor "GNU" for product "Binutils" and version "2.33" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.34 Search vendor "GNU" for product "Binutils" and version "2.34" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.35 Search vendor "GNU" for product "Binutils" and version "2.35" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.36 Search vendor "GNU" for product "Binutils" and version "2.36" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.37 Search vendor "GNU" for product "Binutils" and version "2.37" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.38 Search vendor "GNU" for product "Binutils" and version "2.38" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.39 Search vendor "GNU" for product "Binutils" and version "2.39" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.40 Search vendor "GNU" for product "Binutils" and version "2.40" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.41 Search vendor "GNU" for product "Binutils" and version "2.41" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.42 Search vendor "GNU" for product "Binutils" and version "2.42" | en |
Affected
| ||||||
| GNU Search vendor "GNU" | Binutils Search vendor "GNU" for product "Binutils" | 2.43 Search vendor "GNU" for product "Binutils" and version "2.43" | en |
Affected
| ||||||