An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Jul 30, 2024 | Jul 24, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Jul 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutils-develUpgrade binutils | Nov 3, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutilsUpgrade binutils-devel | Sep 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutilsUpgrade binutils-devel | Feb 24, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Feb 26, 2020 | Jul 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 24, 2019 |
| Suse | — | Upgrade libasan5-32bitUpgrade gcc9-c++-32bitUpgrade libstdc++6-localeUpgrade liblsan0Upgrade gcc7Upgrade libquadmath0-32bitUpgrade gcc7-c++-32bitUpgrade gcc7-goUpgrade cross-hppa64-binutilsUpgrade cross-s390-binutilsUpgrade cross-nvptx-newlib7-develUpgrade binutils-goldUpgrade libgcc_s1Upgrade cross-aarch64-binutilsUpgrade gcc9-goUpgrade libatomic1-32bitUpgrade libgomp1-32bitUpgrade gcc7-infoUpgrade binutils-develUpgrade cross-arm-binutilsUpgrade cross-sparc-binutilsUpgrade libstdc++6Upgrade libgfortran5Upgrade libstdc++6-32bitUpgrade libgo14-32bitUpgrade libgcc_s1-32bitUpgrade cross-nvptx-gcc7Upgrade cross-avr-binutilsUpgrade cross-nvptx-gcc9Upgrade cpp9Upgrade libstdc++6-devel-gcc7-32bitUpgrade libasan5Upgrade libcilkrts5Upgrade gcc9-fortranUpgrade cross-xtensa-binutilsUpgrade gcc7-obj-c++Upgrade gcc9-fortran-32bitUpgrade gcc7-obj-c++-32bitUpgrade cross-mips-binutilsUpgrade libgfortran4Upgrade cross-hppa-binutilsUpgrade gcc7-ada-32bitUpgrade cross-nvptx-newlib9-develUpgrade libstdc++6-pp-gcc9-32bitUpgrade libstdc++6-devel-gcc9-32bitUpgrade libitm1Upgrade binutilsUpgrade gcc7-objc-32bitUpgrade libada7Upgrade cross-ia64-binutilsUpgrade binutils-devel-32bitUpgrade libubsan1-32bitUpgrade libada9-32bitUpgrade gcc7-localeUpgrade libobjc4Upgrade libgomp1Upgrade libubsan0-32bitUpgrade libctf0Upgrade cross-ppc64-binutilsUpgrade libctf-nobfd0Upgrade gcc9-32bitUpgrade libstdc++6-pp-gcc9Upgrade gcc9-ada-32bitUpgrade gcc7-fortran-32bitUpgrade cross-sparc64-binutilsUpgrade cross-ppc-binutilsUpgrade gcc7-objcUpgrade libgfortran5-32bitUpgrade libgo14Upgrade libasan4-32bitUpgrade libstdc++6-devel-gcc7Upgrade libcilkrts5-32bitUpgrade libada9Upgrade cross-spu-binutilsUpgrade cross-rx-binutilsUpgrade libtsan0Upgrade gcc9-infoUpgrade libubsan1Upgrade libubsan0Upgrade gcc7-fortranUpgrade libobjc4-32bitUpgrade libgo11Upgrade libasan4Upgrade gcc9-go-32bitUpgrade gcc7-c++Upgrade cross-ppc64le-binutilsUpgrade gcc7-32bitUpgrade libgfortran4-32bitUpgrade libstdc++6-devel-gcc9Upgrade cross-s390x-binutilsUpgrade libitm1-32bitUpgrade libada7-32bitUpgrade cross-riscv64-binutilsUpgrade gcc7-go-32bitUpgrade gcc9-localeUpgrade cpp7Upgrade libquadmath0Upgrade libatomic1Upgrade cross-epiphany-binutilsUpgrade gcc7-adaUpgrade gcc9-c++Upgrade gcc9Upgrade cross-i386-binutilsUpgrade gcc9-adaUpgrade cross-m68k-binutilsUpgrade libgo11-32bit | Oct 23, 2019 | Jul 24, 2019 |
| Ubuntu | — | Upgrade binutilsUpgrade libiberty-devUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutils (Ubuntu Pro) | Apr 9, 2020 | Jul 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub