CVE-2025-1181

GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

Published Feb 11, 2025 CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Description
A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-2055 A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.
Ubuntu USN Ubuntu USN USN-7423-1 GNU binutils vulnerabilities
Ubuntu USN Ubuntu USN USN-7899-1 GNU binutils vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00125}

epss

{'score': 0.0014}

Type Values Removed Values Added
First Time appeared Gnu
Gnu binutils
Netapp
Netapp active Iq Unified Manager
Netapp ontap Select Deploy Administration Utility
CPEs cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Vendors & Products Gnu
Gnu binutils
Netapp
Netapp active Iq Unified Manager
Netapp ontap Select Deploy Administration Utility
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.
Title GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption
Weaknesses CWE-119
References
Metrics cvssV2_0

{'score': 5.1, 'vector': 'AV:N/AC:H/Au:N/C:P/I:P/A:P'}

cvssV3_0

{'score': 5, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L'}

cvssV3_1

{'score': 5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L'}

cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Apr 25, 2025, 11:02 PM
Reserved
Feb 10, 2025, 11:01 AM
Status
Analyzed
Published
Feb 11, 2025, 8:15 AM
Modified
Jun 17, 2026, 8:38 AM
Severity
Moderate
Public date
Feb 11, 2025, 8:00 AM