The vulnerability of the `finish_stab` function in the `stabs.c` file of the Binutils development tools, related to the operation of pushing values out of the data buffer’s acceptable range, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

🗓️ 21 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Vulnerability in finish_stab in stabs.c enables out of range data operations, risking data disclosure, integrity loss, and service failure.

Reporter	Title	Published	Views	Family All 90
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2025.	5 May 202516:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2025	28 May 202514:21	–	ibm
AlpineLinux	CVE-2021-45078	15 Dec 202120:15	–	alpinelinux
AlmaLinux	Low: binutils security update	14 Nov 202400:00	–	almalinux
AstraLinux	Astra Linux – Vulnerability in binutils	19 Jun 202611:10	–	astralinux
Cloud Foundry	USN-4336-1: GNU binutils vulnerabilities \| Cloud Foundry	14 May 202000:00	–	cloudfoundry
Circl	CVE-2018-12699	15 Dec 202122:47	–	circl
CloudLinux	Fix of CVE: CVE-2021-45078, CVE-2018-9138, CVE-2018-17985, CVE-2018-12641, CVE-2018-12699, CVE-2018-12698, CVE-2018-12697, CVE-2018-12700, CVE-2018-18484, CVE-2018-18701, CVE-2018-12934, CVE-2018-18700, CVE-2018-17794, CVE-2018-18483	29 Dec 202115:09	–	cloudlinux

Vulners

Node

gnu_general_public_license gnu_binutilsMatch2.30

Source	Link
bugs	www.bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102
gcc	www.gcc.gnu.org/bugzilla/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-12699
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-12699
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
ubuntu	www.ubuntu.com/security/notices/USN-4336-1
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.3/
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2815

19 Aug 2025 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.5

CVSS 39.8

EPSS0.04505

binutils vulnerability finish stab function data buffer limits data disclosure integrity risk service failure