An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | binutils | < 2.32.51.20190707-1 | binutils_2.32.51.20190707-1_all.deb |
Debian | 11 | all | binutils | < 2.32.51.20190707-1 | binutils_2.32.51.20190707-1_all.deb |
Debian | 10 | all | binutils | <= 2.31.1-16 | binutils_2.31.1-16_all.deb |
Debian | 999 | all | binutils | < 2.32.51.20190707-1 | binutils_2.32.51.20190707-1_all.deb |
Debian | 13 | all | binutils | < 2.32.51.20190707-1 | binutils_2.32.51.20190707-1_all.deb |