{ "document": { "aggregate_severity": { "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/rhel7els/vex/2025/cve-2025-69647-els_os-rhel7els.json" } ], "tracking": { "current_release_date": "2026-07-28T15:52:26Z", "generator": { "date": "2026-07-28T15:52:26Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2025-69647-ELS_OS-RHEL7ELS", "initial_release_date": "2025-01-01T00:00:00Z", "revision_history": [ { "date": "2025-01-01T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-07-28T15:52:26Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2025-69647" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7", "product_identification_helper": { "cpe": "cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.x86_64", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.x86_64", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils-devel@2.27-44.base.el7_9.1?arch=x86_64" } } }, { "category": "product_version", "name": "binutils-0:2.27-44.base.el7_9.1.x86_64", "product": { "name": "binutils-0:2.27-44.base.el7_9.1.x86_64", "product_id": "binutils-0:2.27-44.base.el7_9.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils@2.27-44.base.el7_9.1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.i686", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.i686", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils-devel@2.27-44.base.el7_9.1?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils-devel@2.27-44.base.el7_9.1.tuxcare.els6?arch=x86_64" } } }, { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils-devel@2.27-44.base.el7_9.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils-devel@2.27-44.base.el7_9.1.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "product": { "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "product_id": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils@2.27-44.base.el7_9.1.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "product": { "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "product_id": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils@2.27-44.base.el7_9.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "product": { "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "product_id": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils@2.27-44.base.el7_9.1.tuxcare.els6?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils-devel@2.27-44.base.el7_9.1.tuxcare.els6?arch=i686" } } }, { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils-devel@2.27-44.base.el7_9.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686", "product": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686", "product_id": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/binutils-devel@2.27-44.base.el7_9.1.tuxcare.els4?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.x86_64" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.i686" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686" }, "product_reference": "binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64" }, "product_reference": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-0:2.27-44.base.el7_9.1.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.x86_64" }, "product_reference": "binutils-0:2.27-44.base.el7_9.1.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64" }, "product_reference": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64" }, "product_reference": "binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "relates_to_product_reference": "Red-Hat-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-69647", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition ('Infinite Loop')" }, "notes": [ { "category": "description", "text": "GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-69647" } ], "release_date": "2026-03-09T15:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-07-28T12:00:42.565467Z", "details": "This CVE is a local, user‑interaction denial‑of‑service in the non‑privileged readelf utility: exploitation requires someone to analyze a crafted binary and only results in an unbounded print loop/CPU churn, with no confidentiality or integrity impact and no code execution. Because readelf is not invoked by network‑facing services or automatic runtime workflows, the effect is confined to the calling process and can be interrupted without broader system impact, making it low‑priority for managed enterprise VM/server environments.", "product_ids": [ "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "Red-Hat-7:binutils-0:2.27-44.base.el7_9.1.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els2.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els4.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.i686", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.tuxcare.els6.x86_64", "Red-Hat-7:binutils-devel-0:2.27-44.base.el7_9.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] } ] }