一、漏洞信息
漏洞编号：CVE-2025-1150
漏洞归属组件：binutils
漏洞归属的版本：2.34,2.36.1,2.37,2.40,2.41
CVSS V3.0分值：
BaseScore：3.1 Low
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
漏洞简述：
A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: I m not going to commit some of the leak fixes I ve been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.
漏洞公开时间：2025-02-11 01:15:18
漏洞创建时间：2025-02-11 04:07:35
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2025-1150

漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：

二、漏洞分析结构反馈
影响性分析说明：
binutils社区 SECURITY.txt 文档说明如下， A security bug is one that threatens the security of a system or network, or might compromise the security of data stored on it. In the context of GNU Binutils there are two ways in which such bugs might occur. In the first, the programs themselves might be tricked into a direct compromise of security. In the second, the tools might introduce a vulnerability in the generated output that was not already present in the files used as input. Other than that, all other bugs will be treated as non-security issues. This does not mean that they will be ignored, just that they will not be given the priority that is given to security bugs. This stance applies to the creation tools in the GNU Binutils (eg as, ld, gold, objcopy) and the libraries that they use. Bugs in inspection tools (eg readelf, nm objdump) will not be considered to be security bugs, since they do not create executable output files.ld为creation tools，该CVE涉及内存泄露，ld作为短时运行工具不会长期持续运行，并且不涉及生成源码未包含的恶意代码，该问题将被视为普通bug而不是会威胁系统安全的安全漏洞，分析结论为受影响（bug存在）但不进行修复，如有场景触发bug导致运行报错，再考虑回合修复。
openEuler评分：
3.1
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
受影响版本排查(受影响/不受影响)：
1.master(2.41):受影响
2.openEuler-20.03-LTS-SP4(2.34):受影响
3.openEuler-22.03-LTS-SP3(2.37):受影响
4.openEuler-22.03-LTS-SP4(2.37):受影响
5.openEuler-24.03-LTS(2.41):受影响
6.openEuler-24.03-LTS-Next(2.41):受影响
7.openEuler-24.03-LTS-SP1(2.41):受影响

修复是否涉及abi变化(是/否)：
1.master(2.41):否
2.openEuler-20.03-LTS-SP4(2.34):否
3.openEuler-22.03-LTS-SP3(2.37):否
4.openEuler-22.03-LTS-SP4(2.37):否
5.openEuler-24.03-LTS(2.41):否
6.openEuler-24.03-LTS-Next(2.41):否
7.openEuler-24.03-LTS-SP1(2.41):否

原因说明：
1.master(2.41):不修复-超出修复范围
2.openEuler-20.03-LTS-SP4(2.34):不修复-超出修复范围
3.openEuler-22.03-LTS-SP3(2.37):不修复-超出修复范围
4.openEuler-22.03-LTS-SP4(2.37):不修复-超出修复范围
5.openEuler-24.03-LTS(2.41):不修复-超出修复范围
6.openEuler-24.03-LTS-Next(2.41):不修复-超出修复范围
7.openEuler-24.03-LTS-SP1(2.41):不修复-超出修复范围