The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils-mingw-w64Upgrade binutils | Jul 30, 2024 | Dec 9, 2014 |
| Freebsd | — | Upgrade x86_64-pc-mingw32-binutilsUpgrade cross-binutilsUpgrade m6811-binutils | Dec 10, 2025 | Mar 24, 2015 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Oct 30, 2017 | Dec 9, 2014 |
| Oracle_linux | — | Upgrade binutilsUpgrade binutils-devel | Oct 16, 2024 | Dec 9, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 26, 2014 |
| Suse | — | Upgrade cross-spu-binutilsUpgrade binutils-develUpgrade binutils-devel-32bitUpgrade binutilsUpgrade binutils-goldUpgrade cross-ppc-binutils | Dec 18, 2015 | Dec 9, 2014 |
| Ubuntu | — | Upgrade gdbUpgrade binutilsUpgrade binutils-multiarch | Dec 20, 2017 | Dec 9, 2014 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 9, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub