An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Jul 30, 2024 | Jul 24, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Jul 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutilsUpgrade binutils-devel | Nov 3, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutils-develUpgrade binutils | Sep 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutils-develUpgrade binutils | Feb 24, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Feb 26, 2020 | Jul 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 24, 2019 |
| Suse | — | Upgrade libstdc++6-pp-gcc9-32bitUpgrade libgfortran4Upgrade libquadmath0-32bitUpgrade libgcc_s1Upgrade gcc9-c++-32bitUpgrade libctf-nobfd0Upgrade gcc7-goUpgrade libstdc++6-devel-gcc7-32bitUpgrade liblsan0Upgrade libubsan0-32bitUpgrade gcc7-c++-32bitUpgrade libubsan1-32bitUpgrade libstdc++6-localeUpgrade gcc7Upgrade cross-mips-binutilsUpgrade libada7Upgrade cross-arm-binutilsUpgrade libgomp1-32bitUpgrade cross-hppa64-binutilsUpgrade gcc9-fortranUpgrade gcc9-goUpgrade libgcc_s1-32bitUpgrade gcc7-infoUpgrade libgfortran5Upgrade cross-avr-binutilsUpgrade libgo14-32bitUpgrade libstdc++6Upgrade cross-nvptx-gcc9Upgrade libgomp1Upgrade libctf0Upgrade gcc9-fortran-32bitUpgrade cross-ppc64-binutilsUpgrade gcc7-objc-32bitUpgrade libitm1Upgrade binutilsUpgrade cross-sparc-binutilsUpgrade gcc7-obj-c++-32bitUpgrade cross-nvptx-newlib9-develUpgrade libstdc++6-devel-gcc9-32bitUpgrade gcc7-ada-32bitUpgrade libasan5Upgrade binutils-devel-32bitUpgrade gcc7-obj-c++Upgrade binutils-goldUpgrade libstdc++6-32bitUpgrade cross-hppa-binutilsUpgrade cross-s390-binutilsUpgrade cpp9Upgrade libada9-32bitUpgrade cross-ia64-binutilsUpgrade cross-aarch64-binutilsUpgrade cross-nvptx-gcc7Upgrade cross-nvptx-newlib7-develUpgrade libobjc4Upgrade libatomic1-32bitUpgrade libcilkrts5Upgrade libasan5-32bitUpgrade binutils-develUpgrade gcc7-localeUpgrade cross-xtensa-binutilsUpgrade libada9Upgrade cross-rx-binutilsUpgrade gcc7-fortran-32bitUpgrade libitm1-32bitUpgrade cross-riscv64-binutilsUpgrade cross-s390x-binutilsUpgrade gcc7-adaUpgrade gcc9-c++Upgrade libtsan0Upgrade cross-i386-binutilsUpgrade cross-sparc64-binutilsUpgrade gcc9Upgrade gcc7-32bitUpgrade libgo11Upgrade gcc7-c++Upgrade libobjc4-32bitUpgrade libasan4Upgrade libquadmath0Upgrade cross-ppc-binutilsUpgrade libubsan1Upgrade libgfortran5-32bitUpgrade libatomic1Upgrade cpp7Upgrade gcc9-infoUpgrade libcilkrts5-32bitUpgrade gcc9-32bitUpgrade libstdc++6-devel-gcc7Upgrade gcc9-go-32bitUpgrade cross-epiphany-binutilsUpgrade libstdc++6-pp-gcc9Upgrade libgfortran4-32bitUpgrade gcc7-go-32bitUpgrade cross-spu-binutilsUpgrade libubsan0Upgrade libgo14Upgrade cross-ppc64le-binutilsUpgrade libada7-32bitUpgrade gcc9-ada-32bitUpgrade libasan4-32bitUpgrade gcc7-objcUpgrade gcc9-adaUpgrade gcc9-localeUpgrade gcc7-fortranUpgrade libgo11-32bitUpgrade libstdc++6-devel-gcc9Upgrade cross-m68k-binutils | Oct 23, 2019 | Jul 24, 2019 |
| Ubuntu | — | Upgrade binutilsUpgrade libiberty-devUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils (Ubuntu Pro)Upgrade binutils-multiarch | Apr 9, 2020 | Jul 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub