CVE-2025-1178

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-1178
A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue.
CVSS

No CVSS.

References
Link Resource
https://security.netapp.com/advisory/ntap-20250411-0008/ Third Party Advisory
https://sourceware.org/bugzilla/attachment.cgi?id=15914 Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=32638 Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=32638 Broken Link
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0 Broken Link
https://vuldb.com/?ctiid.295081 Permissions Required VDB Entry
https://vuldb.com/?id.295081 Third Party Advisory VDB Entry
https://vuldb.com/?submit.495369 Exploit VDB Entry
https://www.gnu.org/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
History

21 May 2025, 20:35

Type Values Removed Values Added
References () https://vuldb.com/?ctiid.295081 - () https://vuldb.com/?ctiid.295081 - Permissions Required, VDB Entry
References () https://vuldb.com/?submit.495369 - () https://vuldb.com/?submit.495369 - Exploit, VDB Entry
References () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0 - () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0 - Broken Link
References () https://www.gnu.org/ - () https://www.gnu.org/ - Product
References () https://vuldb.com/?id.295081 - () https://vuldb.com/?id.295081 - Third Party Advisory, VDB Entry
References () https://security.netapp.com/advisory/ntap-20250411-0008/ - () https://security.netapp.com/advisory/ntap-20250411-0008/ - Third Party Advisory
References () https://sourceware.org/bugzilla/attachment.cgi?id=15914 - () https://sourceware.org/bugzilla/attachment.cgi?id=15914 - Broken Link
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32638 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32638 - Broken Link
CPE cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
First Time Gnu binutils
Netapp
Netapp active Iq Unified Manager
Netapp ontap Select Deploy Administration Utility
Gnu

11 Apr 2025, 22:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20250411-0008/ -

11 Feb 2025, 16:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.6 		v2 : unknown
v3 : unknown
CWE CWE-119

11 Feb 2025, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-11 07:15

Updated : 2025-05-21 20:35

NVD link : CVE-2025-1178

Mitre link : CVE-2025-1178

JSON object : View

Products Affected

netapp

  • active_iq_unified_manager
  • ontap_select_deploy_administration_utility

gnu

  • binutils
CWE

No CWE.