An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Jul 30, 2024 | Jul 24, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Jul 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutils-develUpgrade binutils | Nov 3, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutilsUpgrade binutils-devel | Sep 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutilsUpgrade binutils-devel | Feb 24, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutils-develUpgrade binutils | Feb 26, 2020 | Jul 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 24, 2019 |
| Suse | — | Upgrade cross-i386-binutilsUpgrade gcc7-fortranUpgrade cross-sparc64-binutilsUpgrade libstdc++6-devel-gcc9Upgrade libgfortran5-32bitUpgrade cross-riscv64-binutilsUpgrade gcc7-objcUpgrade libada7-32bitUpgrade libgo14Upgrade gcc7-go-32bitUpgrade cross-ppc-binutilsUpgrade libatomic1Upgrade libquadmath0Upgrade cross-epiphany-binutilsUpgrade cpp7Upgrade libasan4Upgrade gcc7-c++Upgrade libstdc++6-devel-gcc7Upgrade gcc9-go-32bitUpgrade libobjc4-32bitUpgrade gcc9-32bitUpgrade libasan4-32bitUpgrade gcc7-32bitUpgrade gcc7-fortran-32bitUpgrade libgo11Upgrade cross-spu-binutilsUpgrade cross-ppc64le-binutilsUpgrade gcc9-ada-32bitUpgrade cross-rx-binutilsUpgrade libubsan1Upgrade gcc9-infoUpgrade libubsan0Upgrade libcilkrts5-32bitUpgrade gcc9-c++Upgrade gcc9-adaUpgrade libitm1-32bitUpgrade libgo11-32bitUpgrade gcc9Upgrade libtsan0Upgrade cross-s390x-binutilsUpgrade gcc7-adaUpgrade libada9Upgrade gcc9-localeUpgrade cross-m68k-binutilsUpgrade libstdc++6-pp-gcc9Upgrade libgfortran4-32bitUpgrade gcc7-goUpgrade libada9-32bitUpgrade libasan5-32bitUpgrade libcilkrts5Upgrade libgfortran4Upgrade cross-nvptx-newlib9-develUpgrade gcc7-ada-32bitUpgrade libstdc++6-devel-gcc9-32bitUpgrade cross-s390-binutilsUpgrade binutilsUpgrade libstdc++6-localeUpgrade gcc9-c++-32bitUpgrade binutils-goldUpgrade cpp9Upgrade cross-aarch64-binutilsUpgrade cross-nvptx-gcc7Upgrade gcc7-obj-c++-32bitUpgrade cross-nvptx-newlib7-develUpgrade liblsan0Upgrade cross-ppc64-binutilsUpgrade cross-sparc-binutilsUpgrade libobjc4Upgrade binutils-develUpgrade libubsan0-32bitUpgrade gcc7-localeUpgrade cross-arm-binutilsUpgrade gcc7-c++-32bitUpgrade libgfortran5Upgrade libubsan1-32bitUpgrade gcc9-fortran-32bitUpgrade cross-nvptx-gcc9Upgrade libctf0Upgrade libgomp1Upgrade binutils-devel-32bitUpgrade cross-avr-binutilsUpgrade libasan5Upgrade libitm1Upgrade cross-hppa-binutilsUpgrade gcc9-fortranUpgrade cross-ia64-binutilsUpgrade libgomp1-32bitUpgrade gcc7-infoUpgrade cross-xtensa-binutilsUpgrade libada7Upgrade libstdc++6Upgrade libgo14-32bitUpgrade libstdc++6-32bitUpgrade cross-mips-binutilsUpgrade libgcc_s1-32bitUpgrade libstdc++6-pp-gcc9-32bitUpgrade gcc7-objc-32bitUpgrade gcc7-obj-c++Upgrade libctf-nobfd0Upgrade gcc9-goUpgrade libgcc_s1Upgrade gcc7Upgrade libstdc++6-devel-gcc7-32bitUpgrade cross-hppa64-binutilsUpgrade libquadmath0-32bitUpgrade libatomic1-32bit | Oct 23, 2019 | Jul 24, 2019 |
| Ubuntu | — | Upgrade binutils (Ubuntu Pro)Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade libiberty-devUpgrade binutils | Apr 9, 2020 | Jul 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub