TROYANOSYVIRUS
Zuruck zu CVEs

CVE-2025-69644

MEDIUM
5.0

Beschreibung

An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.

CVE Details

CVSS v3.1 Bewertung5.0
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionREQUIRED
Veroffentlicht3/6/2026
Zuletzt geandert3/10/2026
Quellenvd
Honeypot-Sichtungen0

Betroffene Produkte

gnu:binutils

Schwachen (CWE)

CWE-400

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.