CVE-2023-25585: Field `file_table` of `struct module *module` is uninitialized
A flaw was found in Binutils. The use of an uninitialized field in the struct module module may lead to application crash and local denial of service.
Other sources
GNU binutils is vulnerable to a denial of service, caused by not properly initialized the filetable field of struct module and thebfd field of asymbol. By persuading a victim to open a specially crafted content, a remote attacker could exploit this vulnerability to cause a crash.
— IBM
In Binutils, the field filetable of struct module module is created without being initialized, and then its uninitialized field is used to assign file, which is a pointer to a global variable filename. Later on when this variable is used, a segmentation fault occurs.
Upstream bug:
https://sourceware.org/bugzilla/showbug.cgi?id=29892
Upstream fix:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=65cf035b8dc1df5d8020e0b1449514a3c42933e7
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-25585.
What is the severity level of CVE-2023-25585?
CVE-2023-25585 has a severity level of medium (5.5).
How does CVE-2023-25585 affect the affected software?
CVE-2023-25585 affects GNU Binutils version 2.40 by potentially causing application crashes and local denial of service.
What is the Common Weakness Enumeration (CWE) ID of CVE-2023-25585?
The CWE ID of CVE-2023-25585 is CWE-908.
How can I fix CVE-2023-25585?
To fix CVE-2023-25585, update to a patched version of GNU Binutils.