The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutilsUpgrade binutils-mingw-w64 | Jul 30, 2024 | Dec 9, 2014 |
| Freebsd | — | Upgrade cross-binutilsUpgrade x86_64-pc-mingw32-binutilsUpgrade m6811-binutils | Dec 10, 2025 | Mar 24, 2015 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Oct 30, 2017 | Dec 9, 2014 |
| Oracle_linux | — | Upgrade binutilsUpgrade binutils-devel | Oct 16, 2024 | Dec 9, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 26, 2014 |
| Suse | — | Upgrade binutils-goldUpgrade cross-ppc-binutilsUpgrade binutilsUpgrade binutils-devel-32bitUpgrade cross-spu-binutilsUpgrade binutils-devel | Dec 18, 2015 | Dec 9, 2014 |
| Ubuntu | — | Upgrade binutilsUpgrade gdbUpgrade binutils-multiarch | Dec 20, 2017 | Dec 9, 2014 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 9, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub