The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1359 advisory.

    Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from     archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU     linker), nm (for listing symbols from object files), objcopy (for copying and translating object files),     objdump (for displaying information from object files), ranlib (for generating an index for the contents     of an archive), readelf (for displaying detailed information about binary files), size (for listing the     section sizes of an object or archive file), strings (for listing printable strings from files), strip     (for discarding symbols), and addr2line (for converting addresses to file and line).

    Security Fix(es):

    * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : gcc-toolset-15-binutils (RHSA-2026:1359)

medium Nessus Plugin ID 296913

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 4, 2026, 2:23 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202602041423
Version 1.2 Feb 3, 2026, 5:59 AM Reference Plugin Feed: 202602030559
Version 1.1 Jan 28, 2026, 8:38 AM New Plugin Feed: 202601280838