{"grype_matches":[{"artifact":{"id":"ee736a350cb83d66","cpes":["cpe:2.3:a:curl:curl:8.22.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:haxx:curl:8.22.0-r0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:apk/alpine/curl@8.22.0-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"8.22.0-r0","language":"","licenses":["curl"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/curl"},{"path":"/usr/bin/wcurl"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92392","versionConstraint":">= 8.12.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92392","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-10-21","epss":0.00855,"percentile":0.57897}],"risk":0.6669,"urls":["https://curl.se/docs/CVE-2026-92392.html","https://curl.se/docs/CVE-2026-92392.json","https://hackerone.com/reports/4030333","http://www.openwall.com/lists/oss-security/2026/10/18/5","http://www.openwall.com/lists/oss-security/2026/10/18/6"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69650","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69650","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69650","date":"2026-10-21","epss":0.00522,"percentile":0.43395}],"risk":0.3915,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","description":"GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-5704","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-5704","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5704","cwe":"CWE-434","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5704","date":"2026-10-21","epss":0.00401,"percentile":0.33173}],"risk":0.20551249999999996,"urls":["https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:66514","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-5704","https://bugzilla.redhat.com/show_bug.cgi?id=2455360","http://www.openwall.com/lists/oss-security/2026/04/11/10","http://www.openwall.com/lists/oss-security/2026/04/11/11","http://www.openwall.com/lists/oss-security/2026/04/12/2"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5704","description":"A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-21","epss":0.00428,"percentile":0.35968}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-21","epss":0.00428,"percentile":0.35968}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-21","epss":0.00428,"percentile":0.35968}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-21","epss":0.00428,"percentile":0.35968}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69649","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69649","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69649","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69649","date":"2026-10-21","epss":0.00266,"percentile":0.17722}],"risk":0.1862,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33697","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69649","description":"GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed."},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-21","epss":0.00312,"percentile":0.22802}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-21","epss":0.00312,"percentile":0.22802}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-21","epss":0.00312,"percentile":0.22802}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6846","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6846","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6846","date":"2026-10-21","epss":0.00196,"percentile":0.08836}],"risk":0.14994,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6846","https://bugzilla.redhat.com/show_bug.cgi?id=2460006","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6846.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6846","description":"A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3441","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3441","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3441","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3441","date":"2026-10-21","epss":0.00199,"percentile":0.09127}],"risk":0.140295,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3441","https://bugzilla.redhat.com/show_bug.cgi?id=2443826"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3442","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3442","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3442","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3442","date":"2026-10-21","epss":0.00199,"percentile":0.09127}],"risk":0.140295,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3442","https://bugzilla.redhat.com/show_bug.cgi?id=2443828"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3442","description":"A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69651","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69651","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69651","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69651","date":"2026-10-21","epss":0.00244,"percentile":0.14753}],"risk":0.1281,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69651","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69652","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69652","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69652","cwe":"CWE-460","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69652","date":"2026-10-21","epss":0.00179,"percentile":0.07117}],"risk":0.10024000000000001,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33701","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69652","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69648","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69648","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69648","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69648","date":"2026-10-21","epss":0.00179,"percentile":0.071}],"risk":0.10024000000000001,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33641","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69648","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4647","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4647","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4647","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4647","date":"2026-10-21","epss":0.00175,"percentile":0.06589}],"risk":0.09712499999999999,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-4647","https://bugzilla.redhat.com/show_bug.cgi?id=2450302","https://sourceware.org/bugzilla/show_bug.cgi?id=33919"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4647","description":"A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-21","epss":0.00171,"percentile":0.06124}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-21","epss":0.00171,"percentile":0.06124}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-21","epss":0.00171,"percentile":0.06124}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-21","epss":0.00171,"percentile":0.06124}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69647","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69647","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69647","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69647","date":"2026-10-21","epss":0.00158,"percentile":0.04555}],"risk":0.08848000000000002,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33640","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69647","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-21","epss":0.00186,"percentile":0.07797}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-21","epss":0.00186,"percentile":0.07797}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-21","epss":0.00186,"percentile":0.07797}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-21","epss":0.00186,"percentile":0.07797}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6844","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6844","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6844","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6844","date":"2026-10-21","epss":0.00147,"percentile":0.03597}],"risk":0.077175,"urls":["https://access.redhat.com/security/cve/CVE-2026-6844","https://bugzilla.redhat.com/show_bug.cgi?id=2460016"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6844","description":"A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6845","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6845","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6845","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6845","date":"2026-10-21","epss":0.00145,"percentile":0.03405}],"risk":0.0725,"urls":["https://access.redhat.com/errata/RHSA-2026:34924","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6845","https://bugzilla.redhat.com/show_bug.cgi?id=2460012"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6845","description":"A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash."},"relatedVulnerabilities":[]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18508","versionConstraint":"= 1.35 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-18508","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18508","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18508","date":"2026-10-21","epss":0.00141,"percentile":0.03105}],"risk":0.06627,"urls":["https://access.redhat.com/errata/RHSA-2026:50807","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18508","https://bugzilla.redhat.com/show_bug.cgi?id=2509843"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18508","description":"A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69644","versionConstraint":"< 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69644","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69644","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69644","date":"2026-10-21","epss":0.00128,"percentile":0.02232}],"risk":0.064,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33639","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69644","description":"An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file."},"relatedVulnerabilities":[]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:903853a272a30f32dac5b7507ae3722bba707d42e5021b906798818e67dd55ee","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18477","versionConstraint":"= 1.35 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-18477","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.4,"impactScore":3.6,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18477","cwe":"CWE-367","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18477","date":"2026-10-21","epss":0.0008,"percentile":0.00148}],"risk":0.0376,"urls":["https://access.redhat.com/errata/RHSA-2026:49361","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18477","https://bugzilla.redhat.com/show_bug.cgi?id=2509735"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18477","description":"A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue."},"relatedVulnerabilities":[]}],"grade":"A","score":"96.00","as_of":"2026-10-22T10:20:35.086Z","grype_db_version":"2026-10-22T06:29:52.000Z"}