An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-binutils-devel | May 4, 2022 | Dec 27, 2020 | |
| Alpine Linux | alpine-linux-upgrade-mingw-w64-binutilsalpine-linux-upgrade-binutils-cross-embedded | Aug 22, 2024 | Dec 27, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-gcc10-binutilsamazon-linux-ami-2-upgrade-gcc10-binutils-debuginfoamazon-linux-ami-2-upgrade-gcc10-binutils-develamazon-linux-ami-2-upgrade-gcc10-binutils-gold | Sep 16, 2021 | Dec 27, 2020 | |
| Centos_linux | — | centos-upgrade-binutilscentos-upgrade-binutils-debuginfocentos-upgrade-binutils-debugsourcecentos-upgrade-binutils-devel | Nov 10, 2021 | Dec 27, 2020 |
| Debian | debian-upgrade-binutils | Jul 30, 2024 | Dec 27, 2020 | |
| Dell Powerstore Dsa2023129 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-binutils | Jul 12, 2021 | Dec 27, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-gnu-binutils-2-36-1-11-4-36-0-1-101-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-i386-2-36-1-11-4-36-0-1-101-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-sparc-2-36-1-11-4-36-0-1-101-0 | Aug 27, 2021 | Dec 27, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-binutilsoracle-linux-upgrade-binutils-devel | Nov 17, 2021 | Sep 4, 2020 |
| Redhat_linux | redhat-upgrade-binutilsredhat-upgrade-binutils-debuginforedhat-upgrade-binutils-debugsourceredhat-upgrade-binutils-devel | Nov 10, 2021 | Dec 27, 2020 | |
| Rocky_linux | rocky-upgrade-binutilsrocky-upgrade-binutils-debuginforocky-upgrade-binutils-debugsourcerocky-upgrade-binutils-devel | Mar 12, 2024 | Dec 27, 2020 | |
| Suse | — | suse-upgrade-binutilssuse-upgrade-binutils-develsuse-upgrade-binutils-devel-32bitsuse-upgrade-binutils-goldsuse-upgrade-bpftracesuse-upgrade-bpftrace-toolssuse-upgrade-cross-aarch64-binutilssuse-upgrade-cross-arm-binutilssuse-upgrade-cross-avr-binutilssuse-upgrade-cross-epiphany-binutilssuse-upgrade-cross-hppa-binutilssuse-upgrade-cross-hppa64-binutilssuse-upgrade-cross-i386-binutilssuse-upgrade-cross-ia64-binutilssuse-upgrade-cross-m68k-binutilssuse-upgrade-cross-mips-binutilssuse-upgrade-cross-ppc-binutilssuse-upgrade-cross-ppc64-binutilssuse-upgrade-cross-ppc64le-binutilssuse-upgrade-cross-riscv64-binutilssuse-upgrade-cross-rx-binutilssuse-upgrade-cross-s390-binutilssuse-upgrade-cross-s390x-binutilssuse-upgrade-cross-sparc-binutilssuse-upgrade-cross-sparc64-binutilssuse-upgrade-cross-spu-binutilssuse-upgrade-cross-x86_64-binutilssuse-upgrade-cross-xtensa-binutilssuse-upgrade-libctf-nobfd0suse-upgrade-libctf0 | Nov 3, 2021 | Dec 27, 2020 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub