Detections
Analytics

Alpine: multiple binutils packages: security update to 2.44-r0

medium Tenable Self-Hosted Container Security Plugin ID 427805

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

 - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects
 the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads
 to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an
 attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the
 public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the
 patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
 (CVE-2025-0840)

 - A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability
 affects the function bfd_elf_get_str_section of the file bfd/elf.c of the component BFD Library. The
 manipulation leads to null pointer dereference. Local access is required to approach this attack. The
 exploit has been disclosed to the public and may be used. The name of the patch is
 db856d41004301b3a56438efd957ef5cabb91530. It is recommended to apply a patch to fix this issue.
 (CVE-2025-8224)

See Also

https://security.alpinelinux.org/vuln/CVE-2025-0840

https://security.alpinelinux.org/vuln/CVE-2025-8224

Plugin Details

Severity: Medium

ID: 427805

Version: Revision 1.6

Type: Local

Published: 5/30/2025

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.28

CVSS v2

Risk Factor: High

Base Score: 7.6

Temporal Score: 6

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2025-0840

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 4.8

Threat Score: 1.9

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS Score Source: CVE-2025-8224

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 1/29/2025

Reference Information

CVE: CVE-2025-0840, CVE-2025-8224

IAVA: 2025-A-0095