3.3 CVE-2025-11495
Patch Exploit
A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.
https://nvd.nist.gov/vuln/detail/CVE-2025-11495
Categories
CWE-119
References
cna@vuldb.com Patch Exploit
| https://sourceware.org/bugzilla/attachment.cgi?id=16393 Broken Link |
| https://sourceware.org/bugzilla/show_bug.cgi?id=33502 Exploit Issue Tracking |
| https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3 Exploit Issue Tracking |
| https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c951... Patch |
| https://vuldb.com/?ctiid.327620 Permissions Required VDB Entry |
| https://vuldb.com/?id.327620 Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.668290 Third Party Advisory VDB Entry |
| https://www.gnu.org/ Product |
CPE
| cpe | start | end |
|---|---|---|
| Configuration 1 | ||
| cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:* | ||
REMEDIATION
Patch
| Url |
|---|
| https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c951... |
EXPLOITS
Exploit-db.com
| id | description | date | |
|---|---|---|---|
| No known exploits | |||
POC Github
| Url |
|---|
| No known exploits |
Other Nist (github, ...)
| Url |
|---|
| https://sourceware.org/bugzilla/show_bug.cgi?id=33502 |
| https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3 |
CAPEC
Common Attack Pattern Enumerations and Classifications
| id | description | severity |
|---|---|---|
| No entry | ||
Cybersecurity needs ?
Strengthen software security from the outset with our DevSecOps expertise
Integrate security right from the start of the software development cycle for more robust applications and greater customer confidence.
Our team of DevSecOps experts can help you secure your APIs, data pipelines, CI/CD chains, Docker containers and Kubernetes deployments.
