Orta CVSS 5.5 PoC var
CVE-2019-12972: Binutils: sınır dışı okuma
Açıklama (NVD)
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\0' character.
Özet bilgiler
- Ürün
- Gnu Binutils
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %1,80 (yüzdelik 79)
- CWE
- CWE-125
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gnu-binutils | 2.32 | 2.32 | — |
| opensuse-leap | 15.1 | 15.1 | — |
| opensuse-leap | 15.2 | 15.2 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |