Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure Crash allows local code to cause crash
published 1 year ago
Summary
Versions of Azure Crash older than 8.0.4-5 contain a coding mistake that can let someone running code on the same machine corrupt memory and cause the program to stop working. This risk is limited to users who already have access to the system, but it can be triggered deliberately. Update Azure Crash to version 8.0.4-5 or later, or apply the provided patch, to eliminate the problem.
What to do
- Update azure crash to version 8.0.4-5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | crash |
< 8.0.4-5 Fix: upgrade to 8.0.4-5
|
Original advisory text
CVE-2025-11082 affecting package crash for versions less than 8.0.4-5
A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".
References
Timeline
Published27 Sep 2025
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-67925 · OSV
Track software like this
Free during beta