Описание
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 2.29.1-1ubuntu1 |
| bionic | not-affected | 2.29.1-1ubuntu1 |
| cosmic | not-affected | 2.29.1-1ubuntu1 |
| devel | not-affected | 2.29.1-1ubuntu1 |
| disco | not-affected | 2.29.1-1ubuntu1 |
| eoan | not-affected | 2.29.1-1ubuntu1 |
| esm-infra-legacy/trusty | needed | |
| esm-infra/bionic | not-affected | 2.29.1-1ubuntu1 |
| esm-infra/focal | not-affected | 2.29.1-1ubuntu1 |
| esm-infra/xenial | released | 2.26.1-1ubuntu1~16.04.8+esm1 |
Показывать по
4.3 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
The process_version_sections function in readelf.c in GNU Binutils 2.2 ...
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
Уязвимость функции process_version_sections компонента readelf.c программного средства разработки GNU Binutils, позволяющая нарушителю вызвать отказ в обслуживании или оказать иное воздействие
4.3 Medium
CVSS2
7.8 High
CVSS3