Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade binutils | Mar 21, 2024 | Aug 22, 2023 |
| Debian | — | Upgrade binutils | Jul 30, 2024 | Aug 22, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade binutils | Mar 13, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade binutils | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Jul 23, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade binutils | Apr 9, 2024 | Aug 22, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 22, 2023 |
| Suse | — | Upgrade cross-s390x-binutilsUpgrade binutils-develUpgrade cross-hppa-binutilsUpgrade binutils-goldUpgrade cross-ppc-binutilsUpgrade cross-sparc64-binutilsUpgrade cross-hppa64-binutilsUpgrade libctf-nobfd0Upgrade cross-ia64-binutilsUpgrade cross-rx-binutilsUpgrade binutilsUpgrade cross-ppc64-binutilsUpgrade cross-aarch64-binutilsUpgrade cross-sparc-binutilsUpgrade cross-x86_64-binutilsUpgrade cross-ppc64le-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-i386-binutilsUpgrade cross-avr-binutilsUpgrade cross-s390-binutilsUpgrade cross-arm-binutilsUpgrade cross-spu-binutilsUpgrade cross-mips-binutilsUpgrade cross-epiphany-binutilsUpgrade cross-xtensa-binutilsUpgrade cross-m68k-binutilsUpgrade libctf0Upgrade binutils-devel-32bit | Sep 21, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutilsUpgrade binutils-multiarchUpgrade binutils (Ubuntu Pro) | Sep 19, 2023 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub