GNU Binutils 2.43/2.44 objdump binutils/bucomm.c display_info Kari na aiki
Gaskiya vulnerability da aka ware a matsayin karshewa an samu a GNU Binutils 2.43/2.44. Hakika, aikin display_info ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil binutils/bucomm.c, a cikin sashen objdump. A sa manipulation ka Kari na aiki. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-401. Hakika, rauni an bayyana shi 04/03/2025 kamar 32716. An raba bayanin tsaro don saukewa a sourceware.org. Wannan matsala ana saninta da CVE-2025-3198. Wuroo ka a yiɗi a yi ɗum e laawol gese. Tekinikal faɗi ga. Har ila yau, exploit ɗin yana nan. An bayyana exploit ɗin ga mutane kuma yana iya amfani. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á sàmbu huɗɗi-na-gaskiya. Exploit ɗin za a iya saukewa daga sourceware.org. 0-day shima, an ndiyam a wuro be $0-$5k. Ana kiran patch ɗin da ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. An tanadi gyaran matsalar don saukewa a sourceware.org. Ana shawartar a saka patch domin warware wannan matsala. Wannan vulnerability an kuma samu a wasu kundin bayanan vulnerability: Tenable (249290). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
5 Goyarwa · 101 Datenpunkte