Detections
Analytics
Alpine: binutils: security update to 2.41-r1
medium Tenable Cloud Security Plugin ID 421065
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects
the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads
to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an
attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the
public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the
patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
(CVE-2025-0840)
See Also
Plugin Details
Severity: Medium
ID: 421065
Version: Revision 1.6
Type: Local
Published: 3/10/2025
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.28
CVSS v2
Risk Factor: High
Base Score: 7.6
Temporal Score: 6
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2025-0840
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS v4
Risk Factor: Medium
Base Score: 6.3
Threat Score: 2.9
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 1/29/2025
Reference Information
CVE: CVE-2025-0840
IAVA: 2025-A-0095