GoogleOSV:CVE-2023-1972

HistoryMay 17, 2023 - 10:15 p.m.

CVE-2023-1972

2023-05-1722:15:10

Google

osv.dev

heap buffer overflow

bfd_elf_slurp_version_tables

loss of availability

software

0.001 Low

EPSS

Percentile

30.1%

JSON

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.

CPENameOperatorVersion
binutilseq2.38-r4
binutils-gdb.giteqbinutils-2_35
binutilseq2.30-r1
binutilseq2.34-r0
binutilseq2.25-r0
binutilseq2.37-r0
binutilseq2.31.1-r1
binutilseq2.28-r3
binutilseq2.35.1-r1
binutilseq2.39-r0

Name	Operator	Version
binutils	eq	2.38-r4
binutils-gdb.git	eq	binutils-2_35
binutils	eq	2.30-r1
binutils	eq	2.34-r0
binutils	eq	2.25-r0
binutils	eq	2.37-r0
binutils	eq	2.31.1-r1
binutils	eq	2.28-r3
binutils	eq	2.35.1-r1
binutils	eq	2.39-r0

Rows per page:

1-10 of 791

References

bugzilla.redhat.com/show_bug.cgi?id=2185646

security.gentoo.org/glsa/202309-15

sourceware.org/bugzilla/show_bug.cgi?id=30285

CVE-2023-1972

References

Related