A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0e1e9728f0 advisory.

    Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.

    ----

    Update to binutils-2.45.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d4476478fd advisory.

    Fix CVS 2025-11082 and 2025-11083.

    + conditional for explicit BR tcl/tk 8     + dummy rpm check section.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-10c80b93e9 advisory.

    Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d22287ec14 advisory.

    Fix CVS 2025-11082 and 2025-11083.

    + conditional for explicit BR tcl/tk 8     + dummy rpm check section.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5abaff3fcb advisory.

    Fix CVS 2025-11082 and 2025-11083.

    + conditional for explicit BR tcl/tk 8     + dummy rpm check section.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file     bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow.
    The attack is restricted to local execution. The exploit has been published and may be used. This patch is     called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The     code maintainer replied with [f]ixed for 2.46. (CVE-2025-11082)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
271471	Fedora 43 : mingw-binutils (2025-0e1e9728f0)	Nessus	Fedora Local Security Checks	medium
271462	Fedora 43 : insight (2025-d4476478fd)	Nessus	Fedora Local Security Checks	medium
270764	Fedora 42 : mingw-binutils (2025-10c80b93e9)	Nessus	Fedora Local Security Checks	medium
269775	Fedora 41 : insight (2025-d22287ec14)	Nessus	Fedora Local Security Checks	medium
269757	Fedora 42 : insight (2025-5abaff3fcb)	Nessus	Fedora Local Security Checks	medium
266086	Linux Distros Unpatched Vulnerability : CVE-2025-11082	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-11082

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium