Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-25584
HistoryFeb 15, 2023 - 12:00 a.m.

CVE-2023-25584

2023-02-1500:00:00
ubuntu.com
ubuntu.com
37
cve-2023-25584
binutils
parse_module function
out-of-bounds read

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS

0.001

Percentile

18.9%

An out-of-bounds read flaw was found in the parse_module function in
bfd/vms-alpha.c in Binutils.

Notes

Author Note
seth-arnold binutils isn’t safe for untrusted inputs.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchbinutils< 2.30-21ubuntu1~18.04.9UNKNOWN
ubuntu20.04noarchbinutils< 2.34-6ubuntu1.5UNKNOWN
ubuntu22.04noarchbinutils< 2.38-4ubuntu2.2UNKNOWN
ubuntu22.10noarchbinutils< 2.39-3ubuntu1.2UNKNOWN

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS

0.001

Percentile

18.9%