CVE-2025-1181

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-1181
A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.
CVSS

No CVSS.

References
Link Resource
https://security.netapp.com/advisory/ntap-20250425-0007/ Third Party Advisory
https://sourceware.org/bugzilla/attachment.cgi?id=15918 Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=32643 Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=32643 Broken Link
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24 Broken Link
https://vuldb.com/?ctiid.295084 Permissions Required VDB Entry
https://vuldb.com/?id.295084 Third Party Advisory VDB Entry
https://vuldb.com/?submit.495402 Exploit VDB Entry
https://vuldb.com/?submit.495402 Exploit VDB Entry
https://www.gnu.org/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
History

21 May 2025, 20:35

Type Values Removed Values Added
CPE cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
References () https://sourceware.org/bugzilla/attachment.cgi?id=15918 - () https://sourceware.org/bugzilla/attachment.cgi?id=15918 - Broken Link
References () https://vuldb.com/?ctiid.295084 - () https://vuldb.com/?ctiid.295084 - Permissions Required, VDB Entry
References () https://vuldb.com/?submit.495402 - () https://vuldb.com/?submit.495402 - Exploit, VDB Entry
References () https://www.gnu.org/ - () https://www.gnu.org/ - Product
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32643 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32643 - Broken Link
References () https://security.netapp.com/advisory/ntap-20250425-0007/ - () https://security.netapp.com/advisory/ntap-20250425-0007/ - Third Party Advisory
References () https://vuldb.com/?id.295084 - () https://vuldb.com/?id.295084 - Third Party Advisory, VDB Entry
References () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24 - () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24 - Broken Link
First Time Gnu binutils
Netapp
Netapp active Iq Unified Manager
Netapp ontap Select Deploy Administration Utility
Gnu

25 Apr 2025, 23:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20250425-0007/ -

11 Feb 2025, 15:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.0 		v2 : unknown
v3 : unknown
CWE CWE-119

11 Feb 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-11 08:15

Updated : 2025-05-21 20:35

NVD link : CVE-2025-1181

Mitre link : CVE-2025-1181

JSON object : View

Products Affected

netapp

  • active_iq_unified_manager
  • ontap_select_deploy_administration_utility

gnu

  • binutils
CWE

No CWE.