CVE-2023-25584 : An out-of-bounds read flaw was found in the parse

An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

Published 2023-09-14 21:15:10

Updated 2024-02-23 18:51:10

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2023-25584

GNU » Binutils
Versions before (<) 2.40
cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 26 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H	1.8	5.2	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: None Availability: High
6.3	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H	1.0	5.2	Red Hat, Inc.
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: None Availability: High

https://access.redhat.com/security/cve/CVE-2023-25584

CVE-2023-25584- Red Hat Customer Portal
Third Party Advisory
https://security.netapp.com/advisory/ntap-20231103-0002/

CVE-2023-25584 GNU Binutils Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2167467

2167467 – (CVE-2023-25584) CVE-2023-25584 binutils: Out of bounds read in parse_module function in bfd/vms-alpha.c
Issue Tracking;Patch
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=77c225bdeb410cf60da804879ad41622f5f1aa44

sourceware.org Git - binutils-gdb.git/commit
Mailing List;Patch

Jump to