Heap Based Buffer Overflow in Binutils-GDB Product by GNU
CVE-2023-1579
7.8HIGH
Summary
A vulnerability has been identified in the Binutils-GDB package, specifically within the bfd_getl64 function in the libbfd.c file. This flaw can lead to a heap-based buffer overflow, potentially allowing for arbitrary code execution or denial of service conditions. It is critical for users of affected versions to patch their systems to mitigate potential exploitation of this vulnerability. Reference advisories for further guidance on preventative measures.
Affected Version(s)
binutils unknown
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved