CVE-2025-11082
Fixed in a distro release EPSS <1%CVSS 5.3
A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".
Products: gnu binutils, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | binutils | 2.41-58.el10_1.2.alma.1 |
| AlmaLinux 10 | binutils-devel | 2.41-58.el10_1.2.alma.1 |
| AlmaLinux 10 | binutils-gold | 2.41-58.el10_1.2.alma.1 |
| Chainguard | binutils | 2.45.1-r1 |
| Chainguard | binutils | 2.45.1-r0 |
| Chainguard | binutils-dev | 2.45.1-r1 |
| Chainguard | binutils-doc | 2.45.1-r0 |
| Chainguard | binutils-doc | 2.45.1-r1 |
| Chainguard | binutils-gold | 2.45.1-r0 |
| Chainguard | binutils-gold | 2.45.1-r1 |
| Debian 12 | binutils | no fix |
| Debian 13 | binutils | no fix |
| Debian 14 | binutils | 2.46-1 |
| Red Hat Enterprise Linux 10.1 | binutils | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | binutils-debuginfo | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | binutils-debugsource | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | binutils-devel | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | binutils-gold | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | binutils-gold-debuginfo | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | binutils-gprofng-debuginfo | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | cross-binutils-aarch64-debuginfo | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | cross-binutils-ppc64le-debuginfo | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux 10.1 | cross-binutils-s390x-debuginfo | 0:2.41-58.el10_1.2 |
| Red Hat Enterprise Linux eus 10.0 | binutils | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | binutils-debuginfo | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | binutils-debugsource | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | binutils-devel | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | binutils-gold | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | binutils-gold-debuginfo | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | binutils-gprofng-debuginfo | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | cross-binutils-aarch64-debuginfo | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | cross-binutils-ppc64le-debuginfo | 0:2.41-53.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | cross-binutils-s390x-debuginfo | 0:2.41-53.el10_0.2 |
| Red Hat hummingbird 1 | binutils | 0:2.45.1-5.hum1 |
| Red Hat hummingbird 1 | binutils | 0:2.46.1-1.hum1 |
| Red Hat hummingbird 1 | binutils-devel | 0:2.46.1-1.hum1 |
| Red Hat hummingbird 1 | binutils-devel | 0:2.45.1-5.hum1 |
| Red Hat hummingbird 1 | binutils-gold | 0:2.46.1-1.hum1 |
| Red Hat hummingbird 1 | binutils-gold | 0:2.45.1-5.hum1 |
| Red Hat hummingbird 1 | binutils-gprofng | 0:2.45.1-5.hum1 |
| Red Hat hummingbird 1 | binutils-gprofng | 0:2.46.1-1.hum1 |
| Rocky Linux 10 | binutils | 0:2.41-58.el10_1.2 |
| Ubuntu 22.04 LTS | binutils | 2.38-4ubuntu2.12 |
| Ubuntu 22.04 LTS | binutils | 2.38-4ubuntu2.10 |
| Ubuntu 24.04 LTS | binutils | 2.42-4ubuntu2.8 |
| Ubuntu 24.04 LTS | binutils | 2.42-4ubuntu2.6 |
| Ubuntu 25.10 | binutils | 2.45-7ubuntu1.2 |
| Ubuntu Pro 14.04 LTS | binutils | 2.24-5ubuntu14.2+esm8 |
| Ubuntu Pro 16.04 LTS | binutils | 2.26.1-1ubuntu1~16.04.8+esm14 |
| Ubuntu Pro 18.04 LTS | binutils | 2.30-21ubuntu1~18.04.9+esm13 |
| Ubuntu Pro 20.04 LTS | binutils | 2.34-6ubuntu1.11+esm2 |
| Wolfi | binutils | 2.45.1-r1 |
| Wolfi | binutils | 2.45.1-r0 |
| Wolfi | binutils-dev | 2.45.1-r1 |
| Wolfi | binutils-doc | 2.45.1-r0 |
| Wolfi | binutils-doc | 2.45.1-r1 |
| Wolfi | binutils-gold | 2.45.1-r0 |
| Wolfi | binutils-gold | 2.45.1-r1 |
| openSUSE Tumbleweed | binutils | 2.47-1.1 |