GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-binutils | Mar 21, 2024 | Aug 22, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-binutilsamazon-linux-ami-2-upgrade-binutils-debuginfoamazon-linux-ami-2-upgrade-binutils-devel | Jan 10, 2024 | Aug 22, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-binutilsamazon-linux-2023-upgrade-binutils-debuginfoamazon-linux-2023-upgrade-binutils-debugsourceamazon-linux-2023-upgrade-binutils-develamazon-linux-2023-upgrade-binutils-gprofngamazon-linux-2023-upgrade-binutils-gprofng-debuginfo | Feb 17, 2025 | Aug 22, 2023 | |
| Debian | debian-upgrade-binutils | Jul 30, 2024 | Aug 22, 2023 | |
| Dell Powerstore Dsa2024120 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Mar 26, 2024 | |
| Dell Powerstore Dsa2024158 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2024 | |
| Dell Powerstore Dsa2025086 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Feb 20, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-binutils | Jan 10, 2024 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-gdbhuawei-euleros-2_0_sp11-upgrade-gdb-headlesshuawei-euleros-2_0_sp11-upgrade-gdb-help | Jan 10, 2024 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-gdbhuawei-euleros-2_0_sp12-upgrade-gdb-headlesshuawei-euleros-2_0_sp12-upgrade-gdb-help | Nov 12, 2025 | May 16, 2024 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-gdbhuawei-euleros-2_0_sp13-upgrade-gdb-headlesshuawei-euleros-2_0_sp13-upgrade-gdb-help | Oct 24, 2025 | May 16, 2024 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-gdbhuawei-euleros-2_0_sp5-upgrade-gdb-gdbserver | Feb 12, 2024 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-gdbhuawei-euleros-2_0_sp8-upgrade-gdb-gdbserverhuawei-euleros-2_0_sp8-upgrade-gdb-headless | Mar 13, 2024 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-binutils | Jan 10, 2024 | Aug 22, 2023 | |
| Suse | — | suse-upgrade-binutilssuse-upgrade-binutils-develsuse-upgrade-binutils-devel-32bitsuse-upgrade-binutils-goldsuse-upgrade-cross-aarch64-binutilssuse-upgrade-cross-arm-binutilssuse-upgrade-cross-avr-binutilssuse-upgrade-cross-epiphany-binutilssuse-upgrade-cross-hppa-binutilssuse-upgrade-cross-hppa64-binutilssuse-upgrade-cross-i386-binutilssuse-upgrade-cross-ia64-binutilssuse-upgrade-cross-m68k-binutilssuse-upgrade-cross-mips-binutilssuse-upgrade-cross-ppc-binutilssuse-upgrade-cross-ppc64-binutilssuse-upgrade-cross-ppc64le-binutilssuse-upgrade-cross-riscv64-binutilssuse-upgrade-cross-rx-binutilssuse-upgrade-cross-s390-binutilssuse-upgrade-cross-s390x-binutilssuse-upgrade-cross-sparc-binutilssuse-upgrade-cross-sparc64-binutilssuse-upgrade-cross-spu-binutilssuse-upgrade-cross-x86_64-binutilssuse-upgrade-cross-xtensa-binutilssuse-upgrade-libctf-nobfd0suse-upgrade-libctf0 | Sep 21, 2023 | Aug 22, 2023 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Aug 22, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub