The vulnerability of the _bfd_dwarf2_slurpdebug_info function in the bfd/dwarf2.c component of the GNU Binutils development environment allows a hacker to cause a service failure.

🗓️ 14 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Vulnerability in _bfd_dwarf2_slurpdebug_info causes service failures from numeric overflow in GNU Binutils.

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics for NPS	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics	13 Jan 202115:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	23 Jul 202009:47	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0120: binutils (ALINUX3-SA-2022:0120)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : binutils (CESA-2020:1797)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : binutils (EulerOS-SA-2019-2276)	27 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-2522)	9 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.5.0 : binutils (EulerOS-SA-2020-1074)	13 Jan 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : binutils (EulerOS-SA-2020-1205)	13 Mar 202000:00	–	nessus

Vulners

Node

gnu_general_public_license gnu_binutilsRange<2.34

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-17451
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-17451
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.3/
web	www.web.nvd.nist.gov/view/vuln/detail

10 Jan 2024 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 36.5

CVSS 27.8

EPSS0.00741

gnu binutils dwarf2 slurpdebug info numeric overflow service disruption