USN-7919-1

It was discovered that GNU binutils' dumpdwarfsection function could be manipulated to perform an out-of-bounds read. A local attacker could possibly use this issue to cause GNU binutils to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11081)

It was discovered that GNU binutils incorrectly handled certain files. A local attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 25.10. (CVE-2025-11082)

It was discovered that GNU binutils incorrectly handled certain inputs. A local attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue was only fixed in Ubuntu 25.10. (CVE-2025-11083)

It was discovered that certain GNU binutils functions could be manipulated to perform out-of-bounds reads. A local attacker could possibly use this issue to cause GNU binutils to crash, resulting in a denial of service. (CVE-2025-11412, CVE-2025-11413, CVE-2025-11414)

It was discovered that GNU binutils' bfdx86elflatesizesections function could be manipulated to perform an out-of-bounds read. A local attacker could possibly use this issue to cause GNU binutils to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04, and Ubuntu 25.10. (CVE-2025-11494)

It was discovered that GNU binutils' elfx8664relocatesection function could be manipulated to cause a heap-based buffer overflow. A local attacker could possibly use this issue to cause GNU binutils to crash, resulting in a denial of service. This issue was only fixed in Ubuntu 25.04 and Ubuntu 25.10. (CVE-2025-11495)

References

Affected packages

Ubuntu:22.04:LTS

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.38-4ubuntu2.12?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.38-4ubuntu2.12

Affected versions

2.*

2.37-7ubuntu1

2.37-9ubuntu1

2.37-10ubuntu1

2.37.50.20220106-2ubuntu1

2.37.90.20220126-0ubuntu1

2.37.90.20220130-0ubuntu2

2.38-1ubuntu1

2.38-2ubuntu1

2.38-3ubuntu1

2.38-4ubuntu2

2.38-4ubuntu2.1

2.38-4ubuntu2.2

2.38-4ubuntu2.3

2.38-4ubuntu2.4

2.38-4ubuntu2.5

2.38-4ubuntu2.6

2.38-4ubuntu2.7

2.38-4ubuntu2.8

2.38-4ubuntu2.10

2.38-4ubuntu2.11

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-common",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-for-build",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-for-host",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "libbinutils",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "libctf-nobfd0",
            "binary_version": "2.38-4ubuntu2.12"
        },
        {
            "binary_name": "libctf0",
            "binary_version": "2.38-4ubuntu2.12"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11494"
        }
    ]
}

Ubuntu:24.04:LTS

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.42-4ubuntu2.8?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.42-4ubuntu2.8

Affected versions

2.*

2.41-5ubuntu1

2.41-6ubuntu1

2.41.50.20231206-1ubuntu1

2.41.50.20231214-1ubuntu1

2.41.50.20231227-1ubuntu1

2.41.90.20240122-1ubuntu1

2.42-2ubuntu1

2.42-3ubuntu1

2.42-4ubuntu1

2.42-4ubuntu2

2.42-4ubuntu2.3

2.42-4ubuntu2.4

2.42-4ubuntu2.5

2.42-4ubuntu2.6

2.42-4ubuntu2.7

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-arc-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-common",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-for-build",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-for-host",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-loongarch64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-x86-64-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "libbinutils",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "libctf-nobfd0",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "libctf0",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "libgprofng0",
            "binary_version": "2.42-4ubuntu2.8"
        },
        {
            "binary_name": "libsframe1",
            "binary_version": "2.42-4ubuntu2.8"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:24.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11494"
        }
    ]
}

Ubuntu:25.04

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.44-3ubuntu1.3?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44-3ubuntu1.3

Affected versions

2.*

2.43.1-4ubuntu1

2.43.50.20241126-3ubuntu1

2.43.50.20241204-2ubuntu1

2.43.50.20241210-1ubuntu2

2.43.50.20241215-1ubuntu1

2.43.50.20241221-1ubuntu1

2.43.50.20241230-1ubuntu1

2.43.50.20250108-1ubuntu1

2.44-1ubuntu1

2.44-2ubuntu1

2.44-3ubuntu1

2.44-3ubuntu1.1

2.44-3ubuntu1.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-arc-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-common",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-for-build",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-for-host",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-loongarch64-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-sparc-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-x86-64-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "libbinutils",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "libctf-nobfd0",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "libctf0",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "libgprofng0",
            "binary_version": "2.44-3ubuntu1.3"
        },
        {
            "binary_name": "libsframe1",
            "binary_version": "2.44-3ubuntu1.3"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:25.04",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11494"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11495"
        }
    ]
}

Ubuntu:25.10

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.45-7ubuntu1.2?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.45-7ubuntu1.2

Affected versions

2.*

2.44-3ubuntu1

2.44.50.20250602-0ubuntu1

2.44.50.20250604-0ubuntu2

2.44.50.20250616-0ubuntu1

2.44.50.20250707-1ubuntu1

2.45-1ubuntu1

2.45-3ubuntu3

2.45-6ubuntu1

2.45-7ubuntu1

2.45-7ubuntu1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-arc-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-common",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-for-build",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-for-host",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-loongarch64-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-sparc-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-x86-64-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "libbinutils",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "libctf-nobfd0",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "libctf0",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "libgprofng0",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "libsframe-dev",
            "binary_version": "2.45-7ubuntu1.2"
        },
        {
            "binary_name": "libsframe2",
            "binary_version": "2.45-7ubuntu1.2"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11081"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11082"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11083"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11494"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11495"
        }
    ]
}

Ubuntu:Pro:14.04:LTS

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24-5ubuntu14.2+esm8

Affected versions

2.*

2.23.52.20130913-0ubuntu1

2.23.90.20131017-1ubuntu1

2.23.90.20131116-1ubuntu1

2.23.91.20131123-1ubuntu1

2.24-1ubuntu1

2.24-1ubuntu2

2.24-2ubuntu1

2.24-2ubuntu2

2.24-2ubuntu3

2.24-4ubuntu1

2.24-5ubuntu1

2.24-5ubuntu2

2.24-5ubuntu3

2.24-5ubuntu3.1

2.24-5ubuntu13

2.24-5ubuntu14

2.24-5ubuntu14.1

2.24-5ubuntu14.2

2.24-5ubuntu14.2+esm1

2.24-5ubuntu14.2+esm2

2.24-5ubuntu14.2+esm3

2.24-5ubuntu14.2+esm5

2.24-5ubuntu14.2+esm6

2.24-5ubuntu14.2+esm7

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.24-5ubuntu14.2+esm8"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.24-5ubuntu14.2+esm8"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
        },
        {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
        }
    ],
    "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:Pro:14.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11082"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        }
    ]
}

Ubuntu:Pro:16.04:LTS

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm14?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.26.1-1ubuntu1~16.04.8+esm14

Affected versions

2.*

2.25.1-6ubuntu1

2.25.51.20151022-0ubuntu2

2.25.51.20151022-0ubuntu3

2.25.51.20151027-0ubuntu1

2.25.51.20151028-0ubuntu1

2.25.51.20151106-0ubuntu1

2.25.51.20151113-1ubuntu1

2.25.51.20151113-2ubuntu1

2.25.90.20151125-1ubuntu1

2.25.90.20151125-2ubuntu1

2.25.90.20151211-0ubuntu1

2.25.90.20151211-0ubuntu2

2.25.90.20160101-1ubuntu1

2.25.90.20160101-1ubuntu2

2.26-2ubuntu1

2.26-3ubuntu1

2.26-4ubuntu1

2.26-5ubuntu1

2.26-6ubuntu1

2.26-7ubuntu2

2.26-8ubuntu1

2.26-8ubuntu2

2.26-8ubuntu2.1

2.26.1-1ubuntu1~16.04

2.26.1-1ubuntu1~16.04.1

2.26.1-1ubuntu1~16.04.3

2.26.1-1ubuntu1~16.04.4

2.26.1-1ubuntu1~16.04.5

2.26.1-1ubuntu1~16.04.6

2.26.1-1ubuntu1~16.04.7

2.26.1-1ubuntu1~16.04.8

2.26.1-1ubuntu1~16.04.8+esm1

2.26.1-1ubuntu1~16.04.8+esm3

2.26.1-1ubuntu1~16.04.8+esm4

2.26.1-1ubuntu1~16.04.8+esm5

2.26.1-1ubuntu1~16.04.8+esm6

2.26.1-1ubuntu1~16.04.8+esm7

2.26.1-1ubuntu1~16.04.8+esm9

2.26.1-1ubuntu1~16.04.8+esm11

2.26.1-1ubuntu1~16.04.8+esm12

2.26.1-1ubuntu1~16.04.8+esm13

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        },
        {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:Pro:16.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11082"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        }
    ]
}

Ubuntu:Pro:18.04:LTS

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.9+esm13?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.30-21ubuntu1~18.04.9+esm13

Affected versions

2.*

2.29.1-4ubuntu1

2.29.1-6ubuntu1

2.29.1-7ubuntu1

2.29.1-8ubuntu1

2.29.1-10ubuntu1

2.29.1-12ubuntu1

2.30-4ubuntu1

2.30-5ubuntu1

2.30-7ubuntu1

2.30-8ubuntu1

2.30-9ubuntu1

2.30-10ubuntu1

2.30-11ubuntu1

2.30-14ubuntu2

2.30-15ubuntu1

2.30-20ubuntu2~18.04

2.30-21ubuntu1~18.04

2.30-21ubuntu1~18.04.1

2.30-21ubuntu1~18.04.2

2.30-21ubuntu1~18.04.3

2.30-21ubuntu1~18.04.4

2.30-21ubuntu1~18.04.5

2.30-21ubuntu1~18.04.7

2.30-21ubuntu1~18.04.8

2.30-21ubuntu1~18.04.9

2.30-21ubuntu1~18.04.9+esm1

2.30-21ubuntu1~18.04.9+esm3

2.30-21ubuntu1~18.04.9+esm4

2.30-21ubuntu1~18.04.9+esm5

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        },
        {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:Pro:18.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11082"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11494"
        }
    ]
}

Ubuntu:Pro:20.04:LTS

binutils

Package

Name: binutils
Purl: pkg:deb/ubuntu/binutils@2.34-6ubuntu1.11+esm2?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.34-6ubuntu1.11+esm2

Affected versions

2.*

2.33-2ubuntu1

2.33.1-1ubuntu1

2.33.1-5ubuntu1

2.33.1-6ubuntu1

2.33.1-6ubuntu3

2.33.90.20200122-1ubuntu2

2.34-1ubuntu1

2.34-3ubuntu1

2.34-4ubuntu1

2.34-5ubuntu1

2.34-6ubuntu1

2.34-6ubuntu1.1

2.34-6ubuntu1.3

2.34-6ubuntu1.4

2.34-6ubuntu1.5

2.34-6ubuntu1.6

2.34-6ubuntu1.7

2.34-6ubuntu1.8

2.34-6ubuntu1.9

2.34-6ubuntu1.10

2.34-6ubuntu1.11

2.34-6ubuntu1.11+esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "binutils",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-common",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-dev",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-for-build",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-for-host",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-multiarch-dev",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-source",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "libbinutils",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "libctf-nobfd0",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        },
        {
            "binary_name": "libctf0",
            "binary_version": "2.34-6ubuntu1.11+esm2"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:Pro:20.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11082"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11412"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11413"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11414"
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
                    "type": "CVSS_V4"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-11494"
        }
    ]
}