Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fx9g-rhcq-63jg

Опубликовано: 15 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 5.3

Описание

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

EPSS

Процентиль: 5%
0.00152
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-404

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 дня назад

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
redhat
2 дня назад

A flaw was found in GNU Binutils. A local attacker, by performing a manipulation, can cause a null pointer dereference in the `elf_orphan_compatible` function. This could lead to a denial of service or other unpredictable behavior.

CVSS3: 5.3
nvd
2 дня назад

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
debian
2 дня назад

A security flaw has been discovered in GNU Binutils 2.47. This vulnera ...

EPSS

Процентиль: 5%
0.00152
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-404