Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-19726

Опубликовано: 14 июл. 2023
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

A heap-based buffer overflow was found in binutils in the bfd_getl32() function, relating to the auxiliary symbol data. This flaw allows an attacker to read or write to system memory or cause a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6binutilsNot affected
Red Hat Enterprise Linux 7binutilsNot affected
Red Hat Enterprise Linux 7gdbNot affected
Red Hat Enterprise Linux 8binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-11-binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-11-gdbNot affected
Red Hat Enterprise Linux 8gcc-toolset-12-binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-12-gdbNot affected
Red Hat Enterprise Linux 8gcc-toolset-13-binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-13-gdbNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2233934binutils: heap-based buffer overflow in bfd_getl32() in bfd/libbfd.c

EPSS

Процентиль: 24%
0.00084
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 2 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

CVSS3: 8.8
nvd
больше 2 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

CVSS3: 8.8
debian
больше 2 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxi ...

CVSS3: 8.8
github
больше 2 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

CVSS3: 8.8
fstec
больше 5 лет назад

Уязвимость функции bfd_getl32 (libbfd.c) программного средства разработки GNU Binutils, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных или вызвать отказ в обслуживании

EPSS

Процентиль: 24%
0.00084
Низкий

8.8 High

CVSS3