GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-binutils | Jul 30, 2024 | Mar 22, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-binutils | Jan 8, 2018 | Mar 22, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-binutilshuawei-euleros-2_0_sp2-upgrade-binutils-devel | Dec 4, 2019 | Mar 22, 2017 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-binutilshuawei-euleros-2_0_sp3-upgrade-binutils-devel | Dec 18, 2019 | Mar 22, 2017 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Dec 1, 2016 |
| Suse | — | suse-upgrade-binutilssuse-upgrade-binutils-develsuse-upgrade-binutils-devel-32bitsuse-upgrade-binutils-goldsuse-upgrade-cross-ppc-binutilssuse-upgrade-cross-spu-binutilssuse-upgrade-libctf-nobfd0suse-upgrade-libctf0 | Dec 1, 2017 | Mar 22, 2017 |
| Ubuntu | ubuntu-pro-upgrade-binutilsubuntu-pro-upgrade-binutils-multiarch | Jul 22, 2021 | Mar 22, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub