An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Jul 30, 2024 | Jul 24, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Jul 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutils-develUpgrade binutils | Nov 3, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutilsUpgrade binutils-devel | Sep 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutilsUpgrade binutils-devel | Feb 24, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Feb 26, 2020 | Jul 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 24, 2019 |
| Suse | — | Upgrade libatomic1-32bitUpgrade cpp9Upgrade cross-s390-binutilsUpgrade cross-ia64-binutilsUpgrade cross-nvptx-newlib7-develUpgrade gcc9-fortranUpgrade libgcc_s1-32bitUpgrade libgomp1-32bitUpgrade libgo14-32bitUpgrade libasan5-32bitUpgrade cross-hppa-binutilsUpgrade libubsan1-32bitUpgrade libitm1Upgrade libada7Upgrade libcilkrts5Upgrade libstdc++6-pp-gcc9-32bitUpgrade libctf0Upgrade libgomp1Upgrade binutils-devel-32bitUpgrade cross-nvptx-gcc9Upgrade gcc7-obj-c++-32bitUpgrade libquadmath0-32bitUpgrade gcc7-ada-32bitUpgrade libstdc++6-32bitUpgrade binutils-goldUpgrade cross-aarch64-binutilsUpgrade gcc9-c++-32bitUpgrade gcc9-fortran-32bitUpgrade libada9-32bitUpgrade libstdc++6Upgrade gcc7-infoUpgrade cross-avr-binutilsUpgrade binutils-develUpgrade cross-ppc64-binutilsUpgrade libubsan0-32bitUpgrade libgfortran4Upgrade cross-sparc-binutilsUpgrade gcc7-localeUpgrade cross-arm-binutilsUpgrade cross-nvptx-newlib9-develUpgrade libstdc++6-localeUpgrade gcc9-goUpgrade libstdc++6-devel-gcc7-32bitUpgrade libgcc_s1Upgrade cross-hppa64-binutilsUpgrade liblsan0Upgrade libobjc4Upgrade gcc7-objc-32bitUpgrade libgfortran5Upgrade libstdc++6-devel-gcc9-32bitUpgrade libctf-nobfd0Upgrade libasan5Upgrade gcc7-c++-32bitUpgrade gcc7-obj-c++Upgrade cross-nvptx-gcc7Upgrade cross-xtensa-binutilsUpgrade gcc7Upgrade gcc7-goUpgrade cross-mips-binutilsUpgrade binutilsUpgrade libgfortran5-32bitUpgrade gcc7-fortranUpgrade gcc7-go-32bitUpgrade libcilkrts5-32bitUpgrade gcc9Upgrade gcc9-infoUpgrade libstdc++6-devel-gcc9Upgrade libgo14Upgrade gcc7-adaUpgrade gcc9-c++Upgrade cross-sparc64-binutilsUpgrade cross-i386-binutilsUpgrade gcc9-localeUpgrade cross-ppc64le-binutilsUpgrade libatomic1Upgrade libgo11Upgrade gcc7-objcUpgrade libstdc++6-pp-gcc9Upgrade libgfortran4-32bitUpgrade libobjc4-32bitUpgrade libasan4Upgrade gcc7-c++Upgrade gcc7-32bitUpgrade gcc9-go-32bitUpgrade gcc9-adaUpgrade libgo11-32bitUpgrade cross-s390x-binutilsUpgrade cross-epiphany-binutilsUpgrade libquadmath0Upgrade cpp7Upgrade cross-ppc-binutilsUpgrade cross-m68k-binutilsUpgrade libitm1-32bitUpgrade gcc9-ada-32bitUpgrade libada7-32bitUpgrade gcc7-fortran-32bitUpgrade libstdc++6-devel-gcc7Upgrade cross-riscv64-binutilsUpgrade cross-spu-binutilsUpgrade gcc9-32bitUpgrade cross-rx-binutilsUpgrade libubsan0Upgrade libtsan0Upgrade libasan4-32bitUpgrade libada9Upgrade libubsan1 | Oct 23, 2019 | Jul 24, 2019 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutils (Ubuntu Pro)Upgrade libiberty-devUpgrade binutils | Apr 9, 2020 | Jul 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub