An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c when called from pex64_get_runtime_function in pei-x86_64.c.

🗓️ 18 Aug 2020 00:00:00Reported by MicrosoftType

Out-of-bounds read in libbfd Binutils 2.32 causes SEGV in bfd_getl32 called by pex64_get_runtime_function.

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local	20 Dec 201913:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	23 Jul 202009:47	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in GNU Binutils may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service (CVE-2019-9074).	3 Jan 202421:31	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0120: binutils (ALINUX3-SA-2022:0120)	14 May 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : binutils (EulerOS-SA-2019-2450)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : binutils (EulerOS-SA-2019-2558)	19 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-1094)	24 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : binutils (EulerOS-SA-2020-1142)	25 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : binutils (EulerOS-SA-2020-1363)	2 Apr 202000:00	–	nessus

Vulners

Node

18 Aug 2020 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 24.3

CVSS 3.15.5

EPSS0.00087