GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-binutils | Mar 21, 2024 | Aug 22, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-binutilsamazon-linux-2023-upgrade-binutils-debuginfoamazon-linux-2023-upgrade-binutils-debugsourceamazon-linux-2023-upgrade-binutils-develamazon-linux-2023-upgrade-binutils-gprofngamazon-linux-2023-upgrade-binutils-gprofng-debuginfo | Feb 17, 2025 | Aug 22, 2023 | |
| Debian | debian-upgrade-binutils | Jul 30, 2024 | Aug 22, 2023 | |
| Dell Powerstore Dsa2024120 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Mar 26, 2024 | |
| Dell Powerstore Dsa2024158 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-binutils | Jan 10, 2024 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-binutils | Jan 10, 2024 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-binutilshuawei-euleros-2_0_sp8-upgrade-binutils-devel | Mar 13, 2024 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-binutils | Jan 10, 2024 | Aug 22, 2023 | |
| Suse | — | suse-upgrade-binutilssuse-upgrade-binutils-develsuse-upgrade-binutils-devel-32bitsuse-upgrade-binutils-goldsuse-upgrade-cross-aarch64-binutilssuse-upgrade-cross-arm-binutilssuse-upgrade-cross-avr-binutilssuse-upgrade-cross-epiphany-binutilssuse-upgrade-cross-hppa-binutilssuse-upgrade-cross-hppa64-binutilssuse-upgrade-cross-i386-binutilssuse-upgrade-cross-ia64-binutilssuse-upgrade-cross-m68k-binutilssuse-upgrade-cross-mips-binutilssuse-upgrade-cross-ppc-binutilssuse-upgrade-cross-ppc64-binutilssuse-upgrade-cross-ppc64le-binutilssuse-upgrade-cross-riscv64-binutilssuse-upgrade-cross-rx-binutilssuse-upgrade-cross-s390-binutilssuse-upgrade-cross-s390x-binutilssuse-upgrade-cross-sparc-binutilssuse-upgrade-cross-sparc64-binutilssuse-upgrade-cross-spu-binutilssuse-upgrade-cross-x86_64-binutilssuse-upgrade-cross-xtensa-binutilssuse-upgrade-libctf-nobfd0suse-upgrade-libctf0 | Sep 21, 2023 | Aug 22, 2023 |
| Ubuntu | ubuntu-pro-upgrade-binutilsubuntu-pro-upgrade-binutils-multiarchubuntu-upgrade-binutilsubuntu-upgrade-binutils-multiarch | Oct 6, 2023 | Aug 22, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub