The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-binutils | Dec 27, 2019 | Mar 2, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-binutilsamazon-linux-ami-2-upgrade-binutils-debuginfoamazon-linux-ami-2-upgrade-binutils-devel | Apr 27, 2020 | Mar 2, 2018 | |
| Centos_linux | — | centos-upgrade-binutilscentos-upgrade-binutils-debuginfocentos-upgrade-binutils-devel | Aug 28, 2019 | Mar 2, 2018 |
| Debian | debian-upgrade-binutils | Jul 30, 2024 | Mar 2, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-binutils | Nov 27, 2018 | Mar 2, 2018 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-binutilshuawei-euleros-2_0_sp1-upgrade-binutils-devel | May 2, 2018 | Mar 2, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-binutilshuawei-euleros-2_0_sp2-upgrade-binutils-devel | May 3, 2018 | Mar 2, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-binutilshuawei-euleros-2_0_sp3-upgrade-binutils-devel | Jun 28, 2018 | Mar 2, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-gnu-binutils-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-i386-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-sparc-2-32-0-11-4-9-0-1-1-0 | May 30, 2019 | Mar 2, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-binutilsoracle-linux-upgrade-binutils-devel | Nov 6, 2018 | Mar 1, 2018 |
| Redhat_linux | — | redhat-upgrade-binutilsredhat-upgrade-binutils-debuginforedhat-upgrade-binutils-devel | Oct 31, 2018 | Mar 2, 2018 |
| Suse | — | suse-upgrade-binutilssuse-upgrade-binutils-develsuse-upgrade-binutils-devel-32bitsuse-upgrade-binutils-goldsuse-upgrade-cross-aarch64-binutilssuse-upgrade-cross-arm-binutilssuse-upgrade-cross-avr-binutilssuse-upgrade-cross-epiphany-binutilssuse-upgrade-cross-hppa-binutilssuse-upgrade-cross-hppa64-binutilssuse-upgrade-cross-i386-binutilssuse-upgrade-cross-ia64-binutilssuse-upgrade-cross-m68k-binutilssuse-upgrade-cross-mips-binutilssuse-upgrade-cross-ppc-binutilssuse-upgrade-cross-ppc64-binutilssuse-upgrade-cross-ppc64le-binutilssuse-upgrade-cross-riscv64-binutilssuse-upgrade-cross-rx-binutilssuse-upgrade-cross-s390-binutilssuse-upgrade-cross-s390x-binutilssuse-upgrade-cross-sparc-binutilssuse-upgrade-cross-sparc64-binutilssuse-upgrade-cross-spu-binutilssuse-upgrade-libctf-nobfd0suse-upgrade-libctf0 | Oct 18, 2018 | Mar 2, 2018 |
| Ubuntu | ubuntu-pro-upgrade-binutilsubuntu-pro-upgrade-binutils-multiarch | Jul 22, 2021 | Mar 2, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub