A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation le…
中危 CVSS 5.3
摘要
A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://sourceware.org/bugzilla/attachment.cgi?id=16118 Broken Link
- https://sourceware.org/bugzilla/show_bug.cgi?id=33050 Broken Link
- https://sourceware.org/bugzilla/show_bug.cgi?id=33050#c2 Broken Link
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b Broken Link
- https://vuldb.com/?ctiid.316244 Permissions Required
- https://vuldb.com/?id.316244 Third Party Advisory
- https://vuldb.com/?submit.614375 Third Party Advisory
- https://www.gnu.org/ Product
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://sourceware.org/bugzilla/show_bug.cgi?id=33050 Broken Link
时间线
- nvd_ingest NVD