CVE catalog

CVE-2025-11495

GNU binutils vulnerabilities

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbinutilssid2.47.50.20261021-1fixed
Debianbinutilsforky2.47.50.20261021-1fixed
Debianbinutilstrixie2.44-3vulnerable
Debianbinutilsbookworm2.40-2vulnerable
UbuntubinutilsnobleNot reportedvulnerable
Ubuntubinutilsnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-aarch64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-alpha-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-arc-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-arm-linux-gnueabinoble2.42-4ubuntu2.8fixed
Ubuntubinutils-arm-linux-gnueabihfnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-commonnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-devnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-docnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-for-buildnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-for-hostnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-hppa-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-hppa64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-i686-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-i686-kfreebsd-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-i686-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-ia64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-loongarch64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-m68k-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-multiarchnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-multiarch-devnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-powerpc-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-powerpc64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-powerpc64le-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-riscv64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-s390x-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-sh4-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-sourcenoble2.42-4ubuntu2.8fixed
Ubuntubinutils-sparc64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-kfreebsd-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-linux-gnux32noble2.42-4ubuntu2.8fixed
Ubuntulibbinutilsnoble2.42-4ubuntu2.8fixed
Ubuntulibctf-nobfd0noble2.42-4ubuntu2.8fixed
Ubuntulibctf0noble2.42-4ubuntu2.8fixed
Ubuntulibgprofng0noble2.42-4ubuntu2.8fixed
Ubuntulibsframe1noble2.42-4ubuntu2.8fixed
CpebinutilsNot reportedNot reportedunknown
Ubuntubinutilspro2.33-2ubuntu1vulnerable
Ubuntubinutilspro2.33.1-1ubuntu1vulnerable
Ubuntubinutilspro2.33.1-5ubuntu1vulnerable
Ubuntubinutilspro2.33.1-6ubuntu1vulnerable
Ubuntubinutilspro2.33.1-6ubuntu3vulnerable
Ubuntubinutilspro2.33.90.20200122-1ubuntu2vulnerable
Ubuntubinutilspro2.34-1ubuntu1vulnerable
Ubuntubinutilspro2.34-3ubuntu1vulnerable
Ubuntubinutilspro2.34-4ubuntu1vulnerable
Ubuntubinutilspro2.34-5ubuntu1vulnerable
Ubuntubinutilspro2.34-6ubuntu1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.3vulnerable
Ubuntubinutilspro2.34-6ubuntu1.4vulnerable
Ubuntubinutilspro2.34-6ubuntu1.5vulnerable
Ubuntubinutilspro2.34-6ubuntu1.6vulnerable
Ubuntubinutilspro2.34-6ubuntu1.7vulnerable
Ubuntubinutilspro2.34-6ubuntu1.8vulnerable
Ubuntubinutilspro2.34-6ubuntu1.9vulnerable
Ubuntubinutilspro2.34-6ubuntu1.10vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11+esm1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11+esm2vulnerable
Ubuntubinutils22.042.37-7ubuntu1vulnerable
Ubuntubinutils22.042.37-9ubuntu1vulnerable
Ubuntubinutils22.042.37-10ubuntu1vulnerable
Ubuntubinutils22.042.37.50.20220106-2ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220126-0ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220130-0ubuntu2vulnerable
Ubuntubinutils22.042.38-1ubuntu1vulnerable
Ubuntubinutils22.042.38-2ubuntu1vulnerable
Ubuntubinutils22.042.38-3ubuntu1vulnerable
Ubuntubinutils22.042.38-4ubuntu2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.1vulnerable
Ubuntubinutils22.042.38-4ubuntu2.2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.3vulnerable
Ubuntubinutils22.042.38-4ubuntu2.4vulnerable
Ubuntubinutils22.042.38-4ubuntu2.5vulnerable
Ubuntubinutils22.042.38-4ubuntu2.6vulnerable
Ubuntubinutils22.042.38-4ubuntu2.7vulnerable
Ubuntubinutils22.042.38-4ubuntu2.8vulnerable
Ubuntubinutils22.042.38-4ubuntu2.10vulnerable
Ubuntubinutils22.042.38-4ubuntu2.11vulnerable
Ubuntubinutils22.042.38-4ubuntu2.12vulnerable
Ubuntubinutils24.042.41-5ubuntu1vulnerable
Ubuntubinutils24.042.41-6ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231206-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231214-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231227-1ubuntu1vulnerable
Ubuntubinutils24.042.41.90.20240122-1ubuntu1vulnerable
Ubuntubinutils24.042.42-2ubuntu1vulnerable
Ubuntubinutils24.042.42-3ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu2vulnerable
Ubuntubinutils24.042.42-4ubuntu2.3vulnerable
Ubuntubinutils24.042.42-4ubuntu2.4vulnerable
Ubuntubinutils24.042.42-4ubuntu2.5vulnerable
Ubuntubinutils24.042.42-4ubuntu2.6vulnerable
Ubuntubinutils24.042.42-4ubuntu2.7vulnerable
Ubuntubinutils24.042.42-4ubuntu2.8vulnerable
Ubuntubinutils24.042.42-4ubuntu2.10vulnerable
Ubuntubinutils25.102.44-3ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250602-0ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250604-0ubuntu2vulnerable
Ubuntubinutils25.102.44.50.20250616-0ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250707-1ubuntu1vulnerable
Ubuntubinutils25.102.45-1ubuntu1vulnerable
Ubuntubinutils25.102.45-3ubuntu3vulnerable
Ubuntubinutils25.102.45-6ubuntu1vulnerable
Ubuntubinutils25.102.45-7ubuntu1vulnerable
Ubuntubinutils25.102.45-7ubuntu1.1vulnerable
Ubuntubinutils25.102.45-7ubuntu1.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbinutilssourcesid2.46-1unimportantNot reportedNot reported
Debianbinutilssourceforky2.46-1unimportantNot reportedNot reported
Debianbinutilssourcetrixie(unfixed)unimportantNot reportedNot reported
Debianbinutilssourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntubinutilsdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-aarch64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-alpha-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-arc-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabidebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabihfdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-commondebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-devdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-docdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-for-builddebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-for-hostdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-hppa-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-hppa64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-i686-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-i686-kfreebsd-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-i686-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-ia64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-loongarch64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-m68k-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-multiarchdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-multiarch-devdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-powerpc-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64le-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-riscv64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-s390x-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-sh4-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-sourcedebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-sparc64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-kfreebsd-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnux32debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibbinutilsdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibctf-nobfd0debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibctf0debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibgprofng0debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibsframe1debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutilsdeb25.102.45-7ubuntu1.2Not reportedUBUNTU-CVE-2025-11495Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [binutils]Affected
    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-common]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-dev]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-doc]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

Next results

Observed:

References