Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-19726

Опубликовано: 14 июл. 2023
Источник: redhat
CVSS3: 8.8

Описание

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

A heap-based buffer overflow was found in binutils in the bfd_getl32() function, relating to the auxiliary symbol data. This flaw allows an attacker to read or write to system memory or cause a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6binutilsNot affected
Red Hat Enterprise Linux 7binutilsNot affected
Red Hat Enterprise Linux 7gdbNot affected
Red Hat Enterprise Linux 8binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-11-binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-11-gdbNot affected
Red Hat Enterprise Linux 8gcc-toolset-12-binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-12-gdbNot affected
Red Hat Enterprise Linux 8gcc-toolset-13-binutilsNot affected
Red Hat Enterprise Linux 8gcc-toolset-13-gdbNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2233934binutils: heap-based buffer overflow in bfd_getl32() in bfd/libbfd.c

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 3 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

CVSS3: 8.8
nvd
около 3 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

CVSS3: 8.8
debian
около 3 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxi ...

CVSS3: 8.8
github
около 3 лет назад

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

CVSS3: 8.8
fstec
около 6 лет назад

Уязвимость функции bfd_getl32 (libbfd.c) программного средства разработки GNU Binutils, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных или вызвать отказ в обслуживании

8.8 High

CVSS3