Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-0840

Fixed in a distro release EPSS <1%CVSS 5.0

A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.

Published 2025-01-29 · CVE record · OSV

Products: gnu binutils

Distro releases

ReleasePackageFixed in
Alpine 3.18binutils2.40-r8
Alpine 3.19binutils2.41-r1
Alpine 3.20binutils2.42-r1
Alpine 3.21binutils2.43.1-r2
Alpine 3.22binutils2.44-r0
Alpine 3.23binutils2.44-r0
Alpine 3.24binutils2.44-r0
Amazon Linux 2binutils2.29.1-31.amzn2.0.2
Amazon Linux 2binutils-devel2.29.1-31.amzn2.0.2
Amazon Linux 2gcc10-binutils2.35.2-9.amzn2.0.2
Amazon Linux 2gcc10-binutils-devel2.35.2-9.amzn2.0.2
Amazon Linux 2gcc10-binutils-gold2.35.2-9.amzn2.0.2
Amazon Linux 2023binutils2.39-6.amzn2023.0.11
Amazon Linux 2023binutils-devel2.39-6.amzn2023.0.11
Amazon Linux 2023binutils-gprofng2.39-6.amzn2023.0.11
Debian 12binutilsno fix
Debian 13binutils2.43.90.20250122-1
Debian 14binutils2.43.90.20250122-1
SUSE Enterprise Storage 7.1binutils2.45-150100.7.57.1
SUSE Enterprise Storage 7.1openucx1.9.0-150300.4.2.5
SUSE Enterprise Storage 7.1perf5.3.18-150300.38.7.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSopenucx1.9.0-150300.4.2.5
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSperf5.3.18-150300.38.7.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSopenucx1.11.1-150400.4.2.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSperf5.14.21-150400.44.20.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSopenucx1.11.1-150400.4.2.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSperf5.14.21-150400.44.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSopenucx1.13.1-150500.4.2.5
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSperf5.14.21-150500.52.5.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSopenucx1.13.1-150500.4.2.5
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSperf5.14.21-150500.52.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP6binutils2.45-150100.7.57.1
SUSE Linux Enterprise Module for Basesystem 15 SP6openucx1.15.0-150600.3.5.2
SUSE Linux Enterprise Module for Basesystem 15 SP7binutils2.45-150100.7.57.1
SUSE Linux Enterprise Module for Basesystem 15 SP7openucx1.17.0-150700.4.2.7
SUSE Linux Enterprise Module for Development Tools 15 SP6binutils2.45-150100.7.57.1
SUSE Linux Enterprise Module for Development Tools 15 SP6perf6.4.0.git33229.a3afe13a7f-150600.3.17.1
SUSE Linux Enterprise Module for Development Tools 15 SP7binutils2.45-150100.7.57.1
SUSE Linux Enterprise Module for Development Tools 15 SP7perf6.4.0.git54263.0aad576b1c-150700.3.2.2
SUSE Linux Enterprise Module for Package Hub 15 SP6binutils2.45-150100.7.57.1
SUSE Linux Enterprise Module for Package Hub 15 SP7binutils2.45-150100.7.57.1
SUSE Linux Enterprise Server 15 SP3-LTSSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise Server 15 SP3-LTSSopenucx1.9.0-150300.4.2.5
SUSE Linux Enterprise Server 15 SP3-LTSSperf5.3.18-150300.38.7.1
SUSE Linux Enterprise Server 15 SP4-LTSSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise Server 15 SP4-LTSSopenucx1.11.1-150400.4.2.1
SUSE Linux Enterprise Server 15 SP4-LTSSperf5.14.21-150400.44.20.1
SUSE Linux Enterprise Server 15 SP5-LTSSbinutils2.45-150100.7.57.1
SUSE Linux Enterprise Server 15 SP5-LTSSopenucx1.13.1-150500.4.2.5
SUSE Linux Enterprise Server 15 SP5-LTSSperf5.14.21-150500.52.5.1
SUSE Linux Enterprise Server 16.0binutils2.45-160000.1.1
SUSE Linux Enterprise Server 16.0bpftool7.5.0-160000.2.3
SUSE Linux Enterprise Server for SAP Applications 15 SP3binutils2.45-150100.7.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3openucx1.9.0-150300.4.2.5
SUSE Linux Enterprise Server for SAP Applications 15 SP3perf5.3.18-150300.38.7.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4binutils2.45-150100.7.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4openucx1.11.1-150400.4.2.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4perf5.14.21-150400.44.20.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5binutils2.45-150100.7.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5openucx1.13.1-150500.4.2.5
SUSE Linux Enterprise Server for SAP Applications 15 SP5perf5.14.21-150500.52.5.1
SUSE Linux Enterprise Server for SAP applications 16.0binutils2.45-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0bpftool7.5.0-160000.2.3
SUSE Linux Micro 6.2binutils2.45-160000.1.1
SUSE Manager Proxy LTS 4.3binutils2.45-150100.7.57.1
SUSE Manager Proxy LTS 4.3openucx1.11.1-150400.4.2.1
SUSE Manager Server LTS 4.3binutils2.45-150100.7.57.1
SUSE Manager Server LTS 4.3openucx1.11.1-150400.4.2.1
Ubuntu 20.04 LTSbinutils2.34-6ubuntu1.10
Ubuntu 22.04 LTSbinutils2.38-4ubuntu2.7
Ubuntu 22.04 LTSbinutils2.38-4ubuntu2.11
Ubuntu 24.04 LTSbinutils2.42-4ubuntu2.7
Ubuntu 24.04 LTSbinutils2.42-4ubuntu2.4
Ubuntu 25.10binutils2.45-7ubuntu1.1
Ubuntu Pro 14.04 LTSbinutils2.24-5ubuntu14.2+esm7
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm13
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm11
Ubuntu Pro 18.04 LTSbinutils2.30-21ubuntu1~18.04.9+esm5
Ubuntu Pro 18.04 LTSbinutils2.30-21ubuntu1~18.04.9+esm4
Ubuntu Pro 20.04 LTSbinutils2.34-6ubuntu1.11+esm1
openSUSE Leap 15.6binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-aarch64-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-arm-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-avr-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-bpf-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-epiphany-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-hppa-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-hppa64-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-i386-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-ia64-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-m68k-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-mips-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-ppc-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-ppc64-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-ppc64le-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-pru-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-riscv64-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-rx-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-s390-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-s390x-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-sparc-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-sparc64-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-spu-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-x86_64-binutils2.45-150100.7.57.1
openSUSE Leap 15.6cross-xtensa-binutils2.45-150100.7.57.1
openSUSE Leap 15.6openucx1.15.0-150600.3.5.2
openSUSE Leap 15.6perf6.4.0.git33229.a3afe13a7f-150600.3.17.1
openSUSE Leap 16.0binutils2.45-160000.1.1
openSUSE Leap 16.0bpftool7.5.0-160000.2.3
openSUSE Leap 16.0cross-aarch64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-arm-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-avr-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-bpf-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-epiphany-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-hppa-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-hppa64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-i386-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-ia64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-loongarch64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-m68k-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-mips-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-ppc-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-ppc64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-ppc64le-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-pru-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-riscv64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-rx-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-s390-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-s390x-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-sparc-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-sparc64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-spu-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-x86_64-binutils2.45-160000.1.1
openSUSE Leap 16.0cross-xtensa-binutils2.45-160000.1.1
openSUSE Tumbleweedbinutils2.45-2.1