An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Jul 30, 2024 | Jul 24, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Jul 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutils-develUpgrade binutils | Nov 3, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutilsUpgrade binutils-devel | Sep 28, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutils-develUpgrade binutils | Feb 24, 2020 | Jul 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Feb 26, 2020 | Jul 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 24, 2019 |
| Suse | — | Upgrade cross-rx-binutilsUpgrade gcc9-infoUpgrade libubsan0Upgrade libtsan0Upgrade gcc7-adaUpgrade cross-i386-binutilsUpgrade cross-sparc64-binutilsUpgrade gcc9-c++Upgrade gcc9Upgrade libstdc++6-devel-gcc9Upgrade gcc9-ada-32bitUpgrade gcc7-go-32bitUpgrade gcc9-32bitUpgrade libgfortran5-32bitUpgrade libada7-32bitUpgrade gcc9-adaUpgrade gcc7-fortran-32bitUpgrade gcc9-localeUpgrade libasan4-32bitUpgrade libubsan1Upgrade libstdc++6-devel-gcc7Upgrade libcilkrts5-32bitUpgrade libada9Upgrade cross-spu-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-s390x-binutilsUpgrade cross-m68k-binutilsUpgrade libgfortran4-32bitUpgrade libgo11-32bitUpgrade cpp7Upgrade libstdc++6-pp-gcc9Upgrade cross-ppc-binutilsUpgrade libgo14Upgrade libitm1-32bitUpgrade gcc7-fortranUpgrade gcc7-32bitUpgrade cross-epiphany-binutilsUpgrade libgo11Upgrade libobjc4-32bitUpgrade gcc9-go-32bitUpgrade libquadmath0Upgrade cross-ppc64le-binutilsUpgrade libasan4Upgrade libatomic1Upgrade gcc7-objcUpgrade gcc7-c++Upgrade libgcc_s1-32bitUpgrade gcc7-goUpgrade gcc9-fortranUpgrade cross-xtensa-binutilsUpgrade cross-sparc-binutilsUpgrade cross-ppc64-binutilsUpgrade libobjc4Upgrade libubsan0-32bitUpgrade libgfortran5Upgrade binutils-develUpgrade gcc7-infoUpgrade libgomp1-32bitUpgrade cross-aarch64-binutilsUpgrade libstdc++6-32bitUpgrade cross-hppa-binutilsUpgrade libgo14-32bitUpgrade gcc7-objc-32bitUpgrade cross-ia64-binutilsUpgrade gcc9-goUpgrade cross-hppa64-binutilsUpgrade liblsan0Upgrade gcc7-obj-c++Upgrade libquadmath0-32bitUpgrade libstdc++6-devel-gcc7-32bitUpgrade libctf-nobfd0Upgrade libstdc++6-localeUpgrade gcc7Upgrade binutilsUpgrade cross-nvptx-gcc7Upgrade gcc9-c++-32bitUpgrade libstdc++6-devel-gcc9-32bitUpgrade cross-arm-binutilsUpgrade gcc9-fortran-32bitUpgrade binutils-devel-32bitUpgrade libada7Upgrade gcc7-localeUpgrade libatomic1-32bitUpgrade cpp9Upgrade cross-s390-binutilsUpgrade gcc7-obj-c++-32bitUpgrade binutils-goldUpgrade cross-nvptx-gcc9Upgrade cross-nvptx-newlib7-develUpgrade libubsan1-32bitUpgrade libctf0Upgrade libada9-32bitUpgrade libgomp1Upgrade libasan5Upgrade libasan5-32bitUpgrade libgcc_s1Upgrade gcc7-ada-32bitUpgrade libgfortran4Upgrade libcilkrts5Upgrade cross-avr-binutilsUpgrade libstdc++6-pp-gcc9-32bitUpgrade cross-nvptx-newlib9-develUpgrade cross-mips-binutilsUpgrade gcc7-c++-32bitUpgrade libitm1Upgrade libstdc++6 | Oct 23, 2019 | Jul 24, 2019 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutils (Ubuntu Pro)Upgrade binutilsUpgrade libiberty-dev | Apr 9, 2020 | Jul 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub