A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.

The remote NewStart CGSL host, running version MAIN 7.02, has binutils packages installed that are affected by a vulnerability:

  - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
    (CVE-2025-0840)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected     component.(CVE-2025-0840)

Tenable has extracted the preceding description block directly from the EulerOS binutils security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected     component.(CVE-2025-0840)

    https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of     exploitation is: local. The component is: `nm --without-symbol-version` function.(CVE-2024-57360)

Tenable has extracted the preceding description block directly from the EulerOS binutils security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of     exploitation is: local. The component is: `nm --without-symbol-version` function.(CVE-2024-57360)

    A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected     component.(CVE-2025-0840)

Tenable has extracted the preceding description block directly from the EulerOS binutils security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the binutils package has been released.

The version of binutils installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0840 advisory.

  - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and May be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
    (CVE-2025-0840)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gcc10-binutils installed on the remote host is prior to 2.35.2-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2772 advisory.

    A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
    (CVE-2025-0840)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of binutils installed on the remote host is prior to 2.29.1-31. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2771 advisory.

    A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
    (CVE-2025-0840)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
    (CVE-2025-0840)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7306-1 advisory.

    It was discovered that GNU binutils in nm tool is affected by an incorrect access control. An attacker     could possibly use this issue to cause a crash. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04     LTS, and Ubuntu 24.10. (CVE-2024-57360)

    It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a crash or execute arbitrary code. (CVE-2025-0840)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of binutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0840 advisory.

  - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects     the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads     to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an     attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the     public and May be used. Upgrading to version 2.44 is able to address this issue. The identifier of the     patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
    (CVE-2025-0840)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
242735	NewStart CGSL MAIN 7.02 : binutils Vulnerability (NS-SA-2025-0113)	Nessus	NewStart CGSL Local Security Checks	low
235762	EulerOS 2.0 SP10 : binutils (EulerOS-SA-2025-1500)	Nessus	Huawei Local Security Checks	low
235760	EulerOS 2.0 SP10 : binutils (EulerOS-SA-2025-1501)	Nessus	Huawei Local Security Checks	low
235418	EulerOS 2.0 SP12 : binutils (EulerOS-SA-2025-1406)	Nessus	Huawei Local Security Checks	low
235403	EulerOS 2.0 SP12 : binutils (EulerOS-SA-2025-1405)	Nessus	Huawei Local Security Checks	low
234152	EulerOS 2.0 SP11 : binutils (EulerOS-SA-2025-1348)	Nessus	Huawei Local Security Checks	low
234149	EulerOS 2.0 SP11 : binutils (EulerOS-SA-2025-1347)	Nessus	Huawei Local Security Checks	low
233627	EulerOS 2.0 SP13 : binutils (EulerOS-SA-2025-1329)	Nessus	Huawei Local Security Checks	low
233598	EulerOS 2.0 SP13 : binutils (EulerOS-SA-2025-1312)	Nessus	Huawei Local Security Checks	low
233318	Photon OS 5.0: Binutils PHSA-2025-5.0-0488	Nessus	PhotonOS Local Security Checks	low
233131	Azure Linux 3.0 Security Update: binutils (CVE-2025-0840)	Nessus	Azure Linux Local Security Checks	low
232685	Photon OS 4.0: Binutils PHSA-2025-4.0-0767	Nessus	PhotonOS Local Security Checks	low
232365	Amazon Linux 2 : gcc10-binutils (ALAS-2025-2772)	Nessus	Amazon Linux Local Security Checks	low
232361	Amazon Linux 2 : binutils (ALAS-2025-2771)	Nessus	Amazon Linux Local Security Checks	low
231289	Linux Distros Unpatched Vulnerability : CVE-2025-0840	Nessus	Misc.	low
216857	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : GNU binutils vulnerabilities (USN-7306-1)	Nessus	Ubuntu Local Security Checks	low
216358	CBL Mariner 2.0 Security Update: binutils (CVE-2025-0840)	Nessus	MarinerOS Local Security Checks	low

Detections

Analytics

CVE-2025-0840

medium

Tenable Plugins

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low