CVE-2025-1178

Published: Feb 11, 2025Modified: Jun 17, 2026

6.3

Vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue.

Affected (3)

Products: Gnu: Binutils · Netapp: Active Iq Unified Manager, Ontap Select Deploy Administration Utility

1 product

2 products

Active Iq Unified Manager

Ontap Select Deploy Administration Utility

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	Version 2.43

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Ontap Select Deploy Administration Utility	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (9)

https://sourceware.org/bugzilla/attachment.cgi?id=15914

Source: cna@vuldb.com

Broken Link

https://sourceware.org/bugzilla/show_bug.cgi?id=32638

Source: cna@vuldb.com

Broken Link

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0

Source: cna@vuldb.com

Broken Link

https://vuldb.com/?ctiid.295081

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.295081

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.495369

Source: cna@vuldb.com

ExploitVDB Entry

https://www.gnu.org/

Source: cna@vuldb.com

Product

https://security.netapp.com/advisory/ntap-20250411-0008/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=32638

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Broken Link

Timeline

No history available yet.