Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-90829

Опубликовано: 14 сент. 2026
Источник: redhat
CVSS3: 6.6

Описание

A flaw was found in GNU Binutils. A local attacker can exploit this vulnerability by manipulating the SHT_GROUP Section. This manipulation can lead to a null pointer dereference within the bfd_elf_set_group_contents function. The primary consequence of this flaw is a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Hardened ImagesbinutilsAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2533532binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation

6.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 дня назад

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
nvd
2 дня назад

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
debian
2 дня назад

A weakness has been identified in GNU Binutils 2.47. This issue affect ...

CVSS3: 5.3
github
2 дня назад

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

6.6 Medium

CVSS3

Уязвимость CVE-2026-90829