Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-90830

Опубликовано: 14 сент. 2026
Источник: redhat
CVSS3: 5.5

Описание

A flaw was found in GNU Binutils. This vulnerability, located in the _bfd_write_merged_section function within the Section Merge component, allows a local attacker to trigger a null pointer dereference. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Hardened ImagesbinutilsAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2533539binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 дня назад

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
nvd
2 дня назад

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
debian
2 дня назад

A security vulnerability has been detected in GNU Binutils 2.47. Impac ...

CVSS3: 5.3
github
2 дня назад

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.

5.5 Medium

CVSS3