CVE-2023-1972: Buffer Overflow
A potential heap based buffer overflow was found in bfdelfslurpversiontables() in bfd/elf.c. This may lead to loss of availability.
Other sources
Potential heap based buffer overflow found in bfdelfslurpversiontables() in bfd/elf.c.
References:
https://sourceware.org/git/?p=binutils-gdb.git;a=blobdiff;f=bfd/elf.c;h=185028cbd97ae0901c4276c8a4787b12bb75875a;hp=027d01437352555bc4ac0717cb0486c751a7775d;hb=c22d38baefc5a7a1e1f5cdc9dbb556b1f0ec5c57;hpb=f2f9bde5cde7ff34ed0a4c4682a211d402aa1086 https://sourceware.org/bugzilla/showbug.cgi?id=30285
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-1972.
Where was the vulnerability found?
The vulnerability was found in _bfd_elf_slurp_version_tables() in bfd/elf.c.
What is the impact of the vulnerability?
The vulnerability may lead to a heap-based buffer overflow, resulting in a loss of availability.
What software is affected by the vulnerability?
The vulnerability affects GNU Binutils versions between 2.35 and 2.40.
How severe is the vulnerability?
The vulnerability has a severity value of 6.5 (medium).