Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-77mm-f2xg-rwg2

Опубликовано: 08 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 3.3

Описание

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

EPSS

Процентиль: 3%
0.00023
Низкий

1.9 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-119
CWE-125

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 1 месяца назад

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

CVSS3: 3.3
nvd
около 1 месяца назад

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

CVSS3: 3.3
msrc
около 1 месяца назад

GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

CVSS3: 3.3
debian
около 1 месяца назад

A vulnerability was determined in GNU Binutils 2.45. Affected by this ...

CVSS3: 5.5
redos
7 дней назад

Множественные уязвимости binutils

EPSS

Процентиль: 3%
0.00023
Низкий

1.9 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-119
CWE-125