A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

An update of the binutils package has been released.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9174e6ea37 advisory.

    Backport fixes for multiple CVEs.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file     prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached     locally. The exploit has been released to the public and may be used for attacks. (CVE-2025-11839)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fe96f3532b advisory.

    Backport fixes for multiple CVEs.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7899-1 advisory.

    It was discovered that GNU binutils could be forced to perform an out- of-bounds read in certain     instances. An attacker with local access to a system could possibly use this issue to cause a denial of     service. (CVE-2025-11839, CVE-2025-11840)

    It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,     Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-8225)

    It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu     16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-5244, CVE-2025-5245)

    It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2025-3198)

    It was discovered that GNU binutils incorrectly handled certain files. An attacker could possibly use this     issue to cause a crash. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.
    (CVE-2025-1182)

    It was discovered that ld in GNU binutils incorrectly handled certain files. An attacker could possibly     use this issue to cause a crash, expose sensitive information or execute arbitrary code. This issue only     affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-1181)

    It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a crash, expose sensitive information or execute arbitrary code. This issue only     affected Ubuntu 25.04. (CVE-2025-1153)

    It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2025-0840)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
505084	Siemens S7-1500 Unchecked Return Value (CVE-2025-11839)	Tenable OT Security	Tenable.ot	2/10/2026	2/11/2026	medium
274517	Photon OS 5.0: Binutils PHSA-2025-5.0-0670	Nessus	PhotonOS Local Security Checks	11/7/2025	1/21/2026	medium
305026	Fedora 43 : mingw-binutils (2026-9174e6ea37)	Nessus	Fedora Local Security Checks	4/5/2026	4/6/2026	medium
274414	Photon OS 4.0: Binutils PHSA-2025-4.0-0901	Nessus	PhotonOS Local Security Checks	11/7/2025	1/21/2026	medium
271685	Linux Distros Unpatched Vulnerability : CVE-2025-11839	Nessus	Misc.	10/27/2025	2/25/2026	medium
305033	Fedora 42 : mingw-binutils (2026-fe96f3532b)	Nessus	Fedora Local Security Checks	4/5/2026	4/6/2026	medium
276991	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : GNU binutils vulnerabilities (USN-7899-1)	Nessus	Ubuntu Local Security Checks	12/2/2025	3/3/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium