Skip to main content
← All vulnerabilities
CVE-2023-25588

Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: poc
  • Automatable: no
  • Technical impact: partial

Summary

A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: poc · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • n/a binutils

    Version range not reported

  • binutils

    Version range not reported

  • binutils

    Version range not reported

  • binutils

    Version range not reported

  • gcc-toolset-11-binutils

    Version range not reported

  • gcc-toolset-12-binutils

    Version range not reported

  • binutils

    Version range not reported

  • gcc-toolset-12-binutils

    Version range not reported

  • binutils

    Version range not reported

  • radare2

    Version range not reported

  • binutils

    Version range not reported

  • radare2

    Version range not reported

  • radare2

    Version range not reported

  • binutils

    Version range not reported

  • mingw-binutils

    Version range not reported

  • radare2

    Version range not reported

  • insight

    Version range not reported

  • insight

    Version range not reported

  • mingw-binutils

    Version range not reported

  • rizin

    Version range not reported

  • rizin

    Version range not reported

References 5

access.redhat.com

bugzilla.redhat.com

sourceware.org

security.netapp.com