A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.
References
Link | Resource |
---|---|
https://sourceware.org/bugzilla/show_bug.cgi?id=32716 | Broken Link |
https://sourceware.org/bugzilla/show_bug.cgi?id=32716 | Broken Link |
https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 | Issue Tracking |
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d | Broken Link |
https://vuldb.com/?ctiid.303151 | Permissions Required VDB Entry |
https://vuldb.com/?id.303151 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.545773 | Exploit VDB Entry Third Party Advisory |
https://www.gnu.org/ | Product |
Configurations
Configuration 1 (hide)
|
History
15 May 2025, 19:46
Type | Values Removed | Values Added |
---|---|---|
First Time |
Gnu binutils
Gnu |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
CPE | cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:* cpe:2.3:a:gnu:binutils:2.44:*:*:*:*:*:*:* |
|
References | () https://www.gnu.org/ - Product | |
References | () https://sourceware.org/bugzilla/show_bug.cgi?id=32716 - Broken Link | |
References | () https://vuldb.com/?id.303151 - Third Party Advisory, VDB Entry | |
References | () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d - Broken Link | |
References | () https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 - Issue Tracking | |
References | () https://vuldb.com/?ctiid.303151 - Permissions Required, VDB Entry | |
References | () https://vuldb.com/?submit.545773 - Exploit, VDB Entry, Third Party Advisory | |
CWE | CWE-401 |
04 Apr 2025, 21:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-404 |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
04 Apr 2025, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-04-04 02:15
Updated : 2025-05-15 19:46
NVD link : CVE-2025-3198
Mitre link : CVE-2025-3198
JSON object : View
Products Affected
gnu
- binutils
CWE
CWE-401
Missing Release of Memory after Effective Lifetime