Summary
Ein Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.
Product
Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten
Vulnerabilities 4
-
Medium 6.3
Out of bounds read in parse_module function in bfd/vms-alpha.c
An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
-
Medium 4.7
Field `file_table` of `struct module *module` is uninitialized
A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.
-
Medium 4.7
Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
-
Medium 4.7
Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.
Revision history
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von SUSE aufgenommen
-
#1
Initiale Fassung
References
-
SUSE Security Update SUSE-SU-2023:3825-1 vom 2023-09-27
https://lists.suse.com/pipermail/sle-security-updates/2023-September/016367.html
-
SUSE Security Update SUSE-SU-2023:3695-1 vom 2023-09-20
https://lists.suse.com/pipermail/sle-security-updates/2023-September/016227.html
-
NIST Vulnerability Database vom 2023-09-14
https://nvd.nist.gov/vuln/detail/CVE-2023-25588
-
NIST Vulnerability Database vom 2023-09-14
https://nvd.nist.gov/vuln/detail/CVE-2023-25586
-
NIST Vulnerability Database vom 2023-09-14
https://nvd.nist.gov/vuln/detail/CVE-2023-25585
-
NIST Vulnerability Database vom 2023-09-14
https://nvd.nist.gov/vuln/detail/CVE-2023-25584