CVE-2025-1181

Published: Feb 11, 2025Modified: Jun 17, 2026

2.3

Vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.

Affected (4)

Products: Gnu: Binutils · Netapp: Active Iq Unified Manager, Ontap Select Deploy Administration Utility

1 product

2 products

Active Iq Unified Manager

Ontap Select Deploy Administration Utility

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	Version 2.43

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Ontap Select Deploy Administration Utility	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

https://sourceware.org/bugzilla/attachment.cgi?id=15918

Source: cna@vuldb.com

Broken Link

https://sourceware.org/bugzilla/show_bug.cgi?id=32643

Source: cna@vuldb.com

Broken Link

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24

Source: cna@vuldb.com

Broken Link

https://vuldb.com/?ctiid.295084

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.295084

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.495402

Source: cna@vuldb.com

ExploitVDB Entry

https://www.gnu.org/

Source: cna@vuldb.com

Product

https://security.netapp.com/advisory/ntap-20250425-0007/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=32643

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Broken Link

https://vuldb.com/?submit.495402

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitVDB Entry

Timeline

No history available yet.