Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fjw7-r654-jjmq

Опубликовано: 15 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 5.3

Описание

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

EPSS

Процентиль: 5%
0.00152
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 дня назад

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 6.6
redhat
2 дня назад

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the `_bfd_elf_strtab_delref` function. This could lead to unexpected behavior or system instability.

CVSS3: 5.3
nvd
2 дня назад

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
debian
2 дня назад

A vulnerability was detected in GNU Binutils 2.47. The affected elemen ...

EPSS

Процентиль: 5%
0.00152
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-119