find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-binutilsalma-upgrade-binutils-devel | May 4, 2022 | Oct 10, 2019 | |
| Centos_linux | — | centos-upgrade-binutilscentos-upgrade-binutils-debuginfocentos-upgrade-binutils-debugsourcecentos-upgrade-binutils-devel | Nov 5, 2020 | Oct 10, 2019 |
| Debian | debian-upgrade-binutils | Jul 30, 2024 | Oct 10, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-binutils | Jul 28, 2020 | Oct 10, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-binutilshuawei-euleros-2_0_sp2-upgrade-binutils-devel | Feb 22, 2021 | Oct 10, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-binutilshuawei-euleros-2_0_sp3-upgrade-binutils-devel | Apr 30, 2021 | Oct 10, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-binutilshuawei-euleros-2_0_sp5-upgrade-binutils-devel | Mar 24, 2021 | Oct 10, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-binutilshuawei-euleros-2_0_sp8-upgrade-binutils-devel | Nov 28, 2019 | Oct 10, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-gnu-binutils-2-33-1-11-4-18-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-i386-2-33-1-11-4-18-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-sparc-2-33-1-11-4-18-0-1-1-0 | Jan 19, 2021 | Oct 10, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-binutilsoracle-linux-upgrade-binutils-devel | Nov 13, 2020 | Oct 8, 2019 |
| Redhat_linux | redhat-upgrade-binutilsredhat-upgrade-binutils-debuginforedhat-upgrade-binutils-debugsourceredhat-upgrade-binutils-devel | Nov 5, 2020 | Oct 10, 2019 | |
| Suse | — | suse-upgrade-binutilssuse-upgrade-binutils-develsuse-upgrade-binutils-devel-32bitsuse-upgrade-binutils-goldsuse-upgrade-cross-aarch64-binutilssuse-upgrade-cross-arm-binutilssuse-upgrade-cross-avr-binutilssuse-upgrade-cross-epiphany-binutilssuse-upgrade-cross-hppa-binutilssuse-upgrade-cross-hppa64-binutilssuse-upgrade-cross-i386-binutilssuse-upgrade-cross-ia64-binutilssuse-upgrade-cross-m68k-binutilssuse-upgrade-cross-mips-binutilssuse-upgrade-cross-ppc-binutilssuse-upgrade-cross-ppc64-binutilssuse-upgrade-cross-ppc64le-binutilssuse-upgrade-cross-riscv64-binutilssuse-upgrade-cross-rx-binutilssuse-upgrade-cross-s390-binutilssuse-upgrade-cross-s390x-binutilssuse-upgrade-cross-sparc-binutilssuse-upgrade-cross-sparc64-binutilssuse-upgrade-cross-spu-binutilssuse-upgrade-cross-xtensa-binutilssuse-upgrade-libctf-nobfd0suse-upgrade-libctf0 | Nov 1, 2020 | Oct 10, 2019 |
| Ubuntu | ubuntu-pro-upgrade-binutilsubuntu-pro-upgrade-binutils-multiarchubuntu-upgrade-binutilsubuntu-upgrade-binutils-multiarch | Apr 23, 2020 | Oct 10, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub