cbcvebase.
CVE-2025-1148
published 2025-02-10

CVE-2025-1148: A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c…

PriorityP410low3.1CVSS 3.1
AVNACHPRNUIRSUCNINAL
EPSS
0.63%
46.4th percentile
A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."

Affected

13 ranges
VendorProductVersion rangeFixed in
debianbinutils< binutils 2.45-3 (forky)binutils 2.45-3 (forky)
gnubinutils
gnubinutils>= 0 < 2.45-32.45-3
gnubinutils>= 0 < 2.38-4ubuntu2.102.38-4ubuntu2.10
gnubinutils>= 0 < 2.42-4ubuntu2.62.42-4ubuntu2.6
msrcazl3_binutils_2.41-10_on_azure_linux_3.0
msrcazl3_binutils_2.41-7_on_azure_linux_3.0
msrcazl3_binutils_2.41-9_on_azure_linux_3.0
msrccbl2_binutils_2.37-15_on_cbl_mariner_2.0
msrccbl2_binutils_2.37-16_on_cbl_mariner_2.0
msrccbl2_binutils_2.37-17_on_cbl_mariner_2.0
msrccbl2_binutils_2.37-19_on_cbl_mariner_2.0
msrccbl2_binutils_2.37-20_on_cbl_mariner_2.0

CVSS provenance

nvdv3.13.1LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
nvdv4.02.3LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
osv4.8MEDIUM
vendor_redhat7.8HIGH
vendor_ubuntu5.3MEDIUM
vendor_msrc3.1LOW
vendor_debian2.3LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.