3.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-1152

CVE-2025-1152: A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the...

A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The manipulation leads to memory leak. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-1152

CVE-2025-1152:

3.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is described as a memory leak related to the function xstrdup in xstrdup.c. The provided patch (commit d4115c2c8d447e297ae353892de89192c1996211) addresses numerous memory leaks in the ld component of Binutils by replacing calls to xmalloc, xstrdup, and xmemdup with obstack-based allocation functions (stat_alloc, stat_strdup, stat_memdup). This change in memory management strategy implies that the previous manual freeing of memory allocated by xstrdup (and similar functions) was insufficient or incorrect, leading to leaks.

The function xstrdup itself is listed as it's the allocator mentioned in the CVE. The other functions (yylex, lang_memory_region_lookup, lang_memory_region_alias, add_excluded_libs, ldlang_add_undef, lang_add_unique) are identified as vulnerable because they were callers of xstrdup, xmemdup, or xmalloc (for string data) and were modified by the patch. These modifications strongly indicate that these functions were sites where memory was allocated but not properly freed, thus containing the memory leak vulnerability. The patch replaces these direct allocations with obstack allocations, where memory is managed in a larger pool and typically freed all at once, simplifying memory management and fixing the leaks.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.