GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade binutils | Mar 21, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade binutils-debuginfoUpgrade binutils-gprofngUpgrade binutils-develUpgrade binutilsUpgrade binutils-debugsourceUpgrade binutils-gprofng-debuginfo | Feb 17, 2025 | Aug 22, 2023 |
| Debian | — | Upgrade binutils | Jul 30, 2024 | Aug 22, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade binutils | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade binutils | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutils-develUpgrade binutils | Mar 13, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade binutils | Jan 10, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade cross-ppc-binutilsUpgrade cross-sparc-binutilsUpgrade binutils-goldUpgrade cross-spu-binutilsUpgrade cross-m68k-binutilsUpgrade binutils-develUpgrade binutils-devel-32bitUpgrade cross-epiphany-binutilsUpgrade cross-ppc64le-binutilsUpgrade cross-ia64-binutilsUpgrade cross-x86_64-binutilsUpgrade cross-rx-binutilsUpgrade cross-sparc64-binutilsUpgrade cross-mips-binutilsUpgrade cross-hppa64-binutilsUpgrade cross-s390-binutilsUpgrade libctf0Upgrade cross-hppa-binutilsUpgrade binutilsUpgrade libctf-nobfd0Upgrade cross-riscv64-binutilsUpgrade cross-aarch64-binutilsUpgrade cross-xtensa-binutilsUpgrade cross-s390x-binutilsUpgrade cross-arm-binutilsUpgrade cross-ppc64-binutilsUpgrade cross-i386-binutilsUpgrade cross-avr-binutils | Sep 21, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade binutilsUpgrade binutils-multiarchUpgrade binutils (Ubuntu Pro)Upgrade binutils-multiarch (Ubuntu Pro) | Oct 6, 2023 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub