Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-77mm-f2xg-rwg2

Опубликовано: 08 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 3.3

Описание

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

EPSS

Процентиль: 7%
0.00027
Низкий

1.9 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-119
CWE-125

Связанные уязвимости

CVSS3: 3.3
ubuntu
3 месяца назад

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

CVSS3: 3.3
nvd
3 месяца назад

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

CVSS3: 3.3
msrc
3 месяца назад

GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

CVSS3: 3.3
debian
3 месяца назад

A vulnerability was determined in GNU Binutils 2.45. Affected by this ...

CVSS3: 5.5
fstec
3 месяца назад

Уязвимость функции get_link_hash_entry() программного средства разработки GNU Binutils, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 7%
0.00027
Низкий

1.9 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-119
CWE-125