Vulnerability Details : CVE-2023-1579

Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.

Vulnerability category: OverflowMemory Corruption

Published 2023-04-03 23:15:07

Updated 2023-09-30 10:15:10

Source Red Hat, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-1579

Probability of exploitation activity in the next 30 days: 0.05%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 17 % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	nvd@nist.gov
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: secalert@redhat.com (Secondary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

https://security.netapp.com/advisory/ntap-20230511-0009/

CVE-2023-1579 GNU Binutils Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://security.gentoo.org/glsa/202309-15

GNU Binutils: Multiple Vulnerabilities (GLSA 202309-15) — Gentoo security

CVEs referencing this url
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=11d171f1910b508a81d21faa087ad1af573407d8

sourceware.org Git - binutils-gdb.git/commit
Mailing List;Patch
https://sourceware.org/bugzilla/show_bug.cgi?id=29988

29988 – AddressSanitizer: heap-buffer-overflow /binutils-gdb/bfd/libbfd.c:784 in bfd_getl64
Exploit;Issue Tracking;Patch;Third Party Advisory

GNU » Binutils » Version: 2.39
cpe:2.3:a:gnu:binutils:2.39:*:*:*:*:*:*:*
Matching versions