ALPINE-CVE-2025-8225
- Source
- https://security.alpinelinux.org/vuln/CVE-2025-8225
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-8225.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALPINE-CVE-2025-8225
- Upstream
- Published
- 2025-07-27T08:15:25Z
- Modified
- 2025-09-30T05:30:25.778338Z
- Severity
-
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patch is e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4. It is recommended to apply a patch to fix this issue.
- References
Affected packages
Alpine:v3.22 / binutils
Package
- Name
- binutils
- Purl
- pkg:apk/alpine/binutils?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.44-r3
Affected versions
2.*
2.20.51.0.4-r1
2.20.51.0.12-r0
2.21-r0
2.21.1-r0
2.22-r0
2.22-r1
2.23-r0
2.23.1-r0
2.23.2-r0
2.23.2-r1
2.23.2-r2
2.23.2-r3
2.23.2-r4
2.23.2-r5
2.24-r0
2.24-r1
2.24-r2
2.24-r3
2.24-r4
2.24-r5
2.25-r0
2.25-r1
2.25-r2
2.25-r3
2.25.1-r0
2.26-r0
2.26.1-r0
2.27-r0
2.27-r1
2.28-r0
2.28-r1
2.28-r2
2.28-r3
2.30-r0
2.30-r1
2.30-r2
2.30-r3
2.30-r4
2.30-r5
2.31.1-r0
2.31.1-r1
2.31.1-r2
2.32-r0
2.33.1-r0
2.33.1-r1
2.34-r0
2.34-r1
2.35.1-r0
2.35.1-r1
2.35.2-r0
2.35.2-r1
2.35.2-r2
2.37-r0
2.37-r1
2.37-r2
2.37-r3
2.37-r4
2.38-r0
2.38-r1
2.38-r2
2.38-r3
2.38-r4
2.39-r0
2.39-r1
2.39-r2
2.39-r3
2.40-r0
2.40-r1
2.40-r2
2.40-r3
2.40-r4
2.40-r5
2.40-r6
2.40-r7
2.40-r8
2.40-r9
2.40-r10
2.40-r11
2.40-r12
2.41-r0
2.42-r0
2.42-r1
2.43-r0
2.43.1-r0
2.43.1-r1
2.44-r0
2.44-r2