Lucene search

K
vulnrichmentRedhatVULNRICHMENT:CVE-2023-25588
HistorySep 14, 2023 - 8:47 p.m.

CVE-2023-25588 Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

2023-09-1420:47:16
CWE-457
redhat
github.com
binutils
uninitialized field
asymbol struct
local denial of service
application crash
cve-2023-25588

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

A flaw was found in Binutils. The field the_bfd of asymbolstruct is uninitialized in the bfd_mach_o_get_synthetic_symtab function, which may lead to an application crash and local denial of service.

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial