Lucene search

K

Veracode Vulnerability DatabaseVERACODE:37228

HistorySep 21, 2022 - 5:27 p.m.

Heap-buffer-overflow

2022-09-2117:27:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

15

binutils

heap buffer overflow

vulnerability

bfd_getl32

strip_main

EPSS

0.001

Percentile

39.6%

binutils, edge is vulnerable to a heap buffer overflow. The vulnerability exists in bfd_getl32 function when called from the strip_main function in strip-new via a malicious file.

References

github.com/bminor/binutils-gdb/commit/45d92439aebd0386ef8af76e1796d08cfe457e1d

lists.fedoraproject.org/archives/list/[email protected]/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/

lists.fedoraproject.org/archives/list/[email protected]/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/

secdb.alpinelinux.org/edge/main.yaml

security.netapp.com/advisory/ntap-20221104-0007/

sourceware.org/bugzilla/show_bug.cgi?id=29482

sourceware.org/bugzilla/show_bug.cgi?id=29482#c2

sourceware.org/bugzilla/show_bug.cgi?id=29495

sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=45d92439aebd0386ef8af76e1796d08cfe457e1d

EPSS

0.001

Percentile

39.6%

Related for VERACODE:37228

openvas20 nessus31 osv4 alpinelinux1 redhatcve1 debiancve1 cbl_mariner2 ubuntu2 wolfi1 ubuntucve1 cgr1 cve1 nvd1 cvelist1 prion1 cloudfoundry2 mageia1 fedora2 photon8 gentoo1 hp2