Описание
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
An excessive memory consumption vulnerability has been found in GNU Binutils within the function load_separate_debug_files in dwarf2.c. This vulnerability could be exploited by an attacker supplying a crafted ELF file, leading to a denial of service attack due to excessive memory usage.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | binutils | Not affected | ||
| Red Hat Enterprise Linux 7 | binutils | Not affected | ||
| Red Hat Enterprise Linux 7 | gdb | Not affected | ||
| Red Hat Enterprise Linux 8 | binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-11-binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-11-gdb | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-12-binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-12-gdb | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-13-binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-13-gdb | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
Связанные уязвимости
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
GNU Binutils before 2.40 was discovered to contain an excessive memory ...
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
EPSS