{"id":"CVE-2025-1000876","aliases":["CLSA-2025-1762180511"],"status":"published","title":"Fix CVE(s): CVE-2025-1000876","description":"* SECURITY UPDATE: fix integer overflow in libbfd\n     - debian/patches/CVE-2025-1000876.patch: Add overflow checks to prevent\n       potential memory allocation issues from integer overflow\n     - CVE-2025-1000876","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-11-03T14:35:20Z","modified":"2026-06-04T10:03:51Z","fixes":[{"ecosystem":"TuxCare:Debian:10","package":"binutils","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-aarch64-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-alpha-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-arm-linux-gnueabi","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-arm-linux-gnueabihf","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-common","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-dev","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-doc","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-for-build","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-for-host","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-hppa-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-hppa64-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-i686-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-i686-kfreebsd-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-i686-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-ia64-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-m68k-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-mips-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-mips64el-linux-gnuabi64","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-mipsel-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-multiarch","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-multiarch-dev","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc-linux-gnuspe","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc64-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc64le-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-riscv64-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-s390x-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-sh4-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-source","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-sparc64-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-kfreebsd-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-linux-gnu","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-linux-gnux32","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libbinutils","fixed_in":["2.31.1-16+tuxcare.els8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-for-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-for-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-i686-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-i686-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-i686-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-ia64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-mips-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-mips64el-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-mipsel-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc-linux-gnuspe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-riscv64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-linux-gnux32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libbinutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els8"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1762180511.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1762180511","title":"Fix CVE(s): CVE-2025-1000876","description":"   * SECURITY UPDATE: fix integer overflow in libbfd\n     - debian/patches/CVE-2025-1000876.patch: Add overflow checks to prevent\n       potential memory allocation issues from integer overflow\n     - CVE-2025-1000876","status":"published","published":"2025-11-03T14:35:20Z","modified":"2026-06-04T10:03:51.124505Z","updated_at":"2026-11-02T15:43:42.427288Z"}]}}