GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade binutils | Mar 21, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade binutils-debuginfoUpgrade binutilsUpgrade binutils-devel | Jan 10, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade binutils-debuginfoUpgrade binutils-debugsourceUpgrade binutilsUpgrade binutils-gprofng-debuginfoUpgrade binutils-develUpgrade binutils-gprofng | Feb 17, 2025 | Aug 22, 2023 |
| Debian | — | Upgrade binutils | Jul 30, 2024 | Aug 22, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade binutils | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdbUpgrade gdb-headlessUpgrade gdb-help | Nov 12, 2025 | May 16, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdb-headlessUpgrade gdb-helpUpgrade gdb | Oct 24, 2025 | May 16, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdb-gdbserverUpgrade gdb | Feb 12, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gdbUpgrade gdb-headlessUpgrade gdb-gdbserver | Mar 13, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade binutils | Jan 10, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade cross-hppa64-binutilsUpgrade cross-sparc-binutilsUpgrade cross-epiphany-binutilsUpgrade cross-m68k-binutilsUpgrade cross-rx-binutilsUpgrade cross-spu-binutilsUpgrade cross-aarch64-binutilsUpgrade cross-xtensa-binutilsUpgrade binutils-devel-32bitUpgrade cross-ppc-binutilsUpgrade cross-ppc64-binutilsUpgrade libctf0Upgrade binutilsUpgrade cross-hppa-binutilsUpgrade cross-sparc64-binutilsUpgrade cross-s390-binutilsUpgrade binutils-develUpgrade binutils-goldUpgrade libctf-nobfd0Upgrade cross-avr-binutilsUpgrade cross-arm-binutilsUpgrade cross-x86_64-binutilsUpgrade cross-s390x-binutilsUpgrade cross-mips-binutilsUpgrade cross-i386-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-ppc64le-binutilsUpgrade cross-ia64-binutils | Sep 21, 2023 | Aug 22, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub