A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990646 advisory.

    A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections     of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The     attack needs to be approached locally. The exploit has been made public and could be used. The patch is     identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the binutils package has been released.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0e1e9728f0 advisory.

    Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.

    ----

    Update to binutils-2.45.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-10c80b93e9 advisory.

    Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections     of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The     attack needs to be approached locally. The exploit has been made public and could be used. The patch is     identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
    (CVE-2025-11494)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
274611	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdb (UTSA-2025-990646)	Nessus	Unity Linux Local Security Checks	medium
272155	Photon OS 5.0: Binutils PHSA-2025-5.0-0663	Nessus	PhotonOS Local Security Checks	medium
271471	Fedora 43 : mingw-binutils (2025-0e1e9728f0)	Nessus	Fedora Local Security Checks	medium
270764	Fedora 42 : mingw-binutils (2025-10c80b93e9)	Nessus	Fedora Local Security Checks	medium
270211	Linux Distros Unpatched Vulnerability : CVE-2025-11494	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-11494

medium

Tenable Plugins

medium

medium

medium

medium

medium