Orta CVSS 5.5 PoC var
CVE-2019-14250: Binutils: tamsayı taşması
Açıklama (NVD)
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
Özet bilgiler
- Ürün
- Gnu Binutils
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %2,33 (yüzdelik 84)
- CWE
- CWE-190
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gnu-binutils | 2.32 | 2.32 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| opensuse-leap | 15.0 | 15.0 | — |
| opensuse-leap | 15.1 | 15.1 | — |
| opensuse-leap | 15.2 | 15.2 | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- www.securityfocus.com
- gcc.gnu.org
- gcc.gnu.org
- security.gentoo.org
- security.netapp.com
- usn.ubuntu.com
- usn.ubuntu.com
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- www.securityfocus.com
- gcc.gnu.org
- gcc.gnu.org
- security.gentoo.org
- security.netapp.com
- usn.ubuntu.com
- usn.ubuntu.com
- CWE-190