Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.

An update of the gdb package has been released.

An update of the binutils package has been released.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579)

  - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow     issue in demangle_type in rust-demangle.c. (CVE-2021-32256)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode     at /gdb/ada-lang.c. (CVE-2023-39128)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2353 advisory.

    mingw-binutils     [2.41-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [2.41-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [2.41-1]
    - Update to 2.41

    [2.40-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    mingw-crt
    * Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org>
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org>
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [11.0.1-1]
    - Update to 11.0.1

    * Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org>
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    mingw-filesystem     [148-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [148-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [148-1]
    - Add pkgconfig provides

    [147-3]
    - Add dependency on cmake-rpm-macros

    [147-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    mingw-gcc     [13.2.1-7]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [13.2.1-6]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [13.2.1-1]
    - Update to 13.2.1 (20230728)

    [13.1.1-5]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    mingw-headers     [11.0.1-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [11.0.1-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [11.0.1-1]
    - Update to 11.0.1

    [11.0.0-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    mingw-libffi     [3.4.4-5]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [3.4.4-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    mingw-w64-tools     [11.0.1-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [11.0.1-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [11.0.1-1]
    - Update to 11.0.1

    mingw-winpthreads     [11.0.1-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [11.0.1-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [11.0.1-1]
    - Update to 11.0.1

    [11.0.0-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    mingw-zlib     [1.3.1-1]
    - Update to 1.3.1

    [1.2.13-5]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [1.2.13-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    [1.2.13-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2353 advisory.

    MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create     Microsoft Windows applications.

    Security Fix(es):

    * binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-425 advisory.

    A potential illegal memory access in binutils has been found when parsing a corrupt file. (CVE-2023-1579)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202309-15 (GNU Binutils: Multiple Vulnerabilities)

  - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt     symbol version information may result in a denial of service. This issue is the result of an incomplete     fix for CVE-2020-16599. (CVE-2022-4285)

  - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called     from the strip_main function in strip-new via a crafted file. (CVE-2022-38533)

  - Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64. (CVE-2023-1579)

  - A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may     lead to loss of availability. (CVE-2023-1972)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3825-1 advisory.

  - An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers     to read or write to system memory or cause a denial of service. (CVE-2020-19726)

  - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow     issue in demangle_type in rust-demangle.c. (CVE-2021-32256)

  - An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function     display_debug_names allows attackers to cause a denial of service. (CVE-2022-35205)

  - Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function     read_and_display_attr_value in file dwarf.c. (CVE-2022-35206)

  - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt     symbol version information may result in a denial of service. This issue is the result of an incomplete     fix for CVE-2020-16599. (CVE-2022-4285)

  - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in     file readelf.c. (CVE-2022-44840)

  - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in     file readelf.c. (CVE-2022-45703)

  - An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out     of bound reads which may cause a denial of service or other unspecified impacts. (CVE-2022-47673)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. (CVE-2022-47695)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function compare_symbols. (CVE-2022-47696)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a     DNS attack. (CVE-2022-48063)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file     and cause a DNS attack. (CVE-2022-48064)

  - GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function     find_abstract_instance in dwarf2.c. (CVE-2022-48065)

  - ** DISPUTED ** A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This     vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor.
    The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue.
    VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this     vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically     addresses of the running application that is built with gmon enabled. It's basically trusted input or     input that needs an actual security flaw to be compromised or controlled. (CVE-2023-0687)

  - Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64. (CVE-2023-1579)

  - A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may     lead to loss of availability. (CVE-2023-1972)

  - A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to     application crash and local denial of service. (CVE-2023-25585)

  - A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the     `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of     service. (CVE-2023-25588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3695-1 advisory.

  - An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers     to read or write to system memory or cause a denial of service. (CVE-2020-19726)

  - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow     issue in demangle_type in rust-demangle.c. (CVE-2021-32256)

  - An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function     display_debug_names allows attackers to cause a denial of service. (CVE-2022-35205)

  - Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function     read_and_display_attr_value in file dwarf.c. (CVE-2022-35206)

  - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt     symbol version information may result in a denial of service. This issue is the result of an incomplete     fix for CVE-2020-16599. (CVE-2022-4285)

  - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in     file readelf.c. (CVE-2022-44840)

  - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in     file readelf.c. (CVE-2022-45703)

  - An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out     of bound reads which may cause a denial of service or other unspecified impacts. (CVE-2022-47673)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. (CVE-2022-47695)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function compare_symbols. (CVE-2022-47696)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a     DNS attack. (CVE-2022-48063)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file     and cause a DNS attack. (CVE-2022-48064)

  - GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function     find_abstract_instance in dwarf2.c. (CVE-2022-48065)

  - ** DISPUTED ** A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This     vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor.
    The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue.
    VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this     vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically     addresses of the running application that is built with gmon enabled. It's basically trusted input or     input that needs an actual security flaw to be compromised or controlled. (CVE-2023-0687)

  - Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64. (CVE-2023-1579)

  - A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may     lead to loss of availability. (CVE-2023-1972)

  - A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to     application crash and local denial of service. (CVE-2023-25585)

  - A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the     `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of     service. (CVE-2023-25588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6101-1 advisory.

    It was discovered that GNU binutils incorrectly handled certain DWARF files. An attacker could possibly     use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 22.10.
    (CVE-2023-1579)

    It was discovered that GNU binutils did not properly verify the version definitions in zer0-lengthverdef     table. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue     only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. (CVE-2023-1972)

    It was discovered that GNU binutils did not properly validate the size of length parameter in vms-alpha.
    An attacker could possibly use this issue to cause a crash or access sensitive information. This issue     only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2023-25584)

    It was discovered that GNU binutils did not properly initialized the file_table field of struct module and     the_bfd field of asymbol. An attacker could possibly use this issue to cause a crash. This issue only     affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
    (CVE-2023-25585, CVE-2023-25588)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-15c6e4be28 advisory.

    Backport fix for CVE-2023-1579.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
204554	Photon OS 5.0: Gdb PHSA-2023-5.0-0060	Nessus	PhotonOS Local Security Checks	critical
204288	Photon OS 4.0: Gdb PHSA-2023-4.0-0440	Nessus	PhotonOS Local Security Checks	high
203610	Photon OS 5.0: Binutils PHSA-2023-5.0-0082	Nessus	PhotonOS Local Security Checks	high
198399	RHEL 9 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
195378	RHEL 7 : binutils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
195085	Oracle Linux 9 : mingw / components (ELSA-2024-2353)	Nessus	Oracle Linux Local Security Checks	high
194781	RHEL 9 : mingw components (RHSA-2024:2353)	Nessus	Red Hat Local Security Checks	high
184421	Amazon Linux 2023 : binutils, binutils-devel, binutils-gprofng (ALAS2023-2023-425)	Nessus	Amazon Linux Local Security Checks	high
182400	GLSA-202309-15 : GNU Binutils: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
182107	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : binutils (SUSE-SU-2023:3825-1)	Nessus	SuSE Local Security Checks	critical
181753	SUSE SLES12 Security Update : binutils (SUSE-SU-2023:3695-1)	Nessus	SuSE Local Security Checks	critical
176325	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : GNU binutils vulnerabilities (USN-6101-1)	Nessus	Ubuntu Local Security Checks	high
173745	Fedora 38 : mingw-binutils (2023-15c6e4be28)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2023-1579

high

Tenable Plugins

critical

high

high

high

critical

high

high

high

high

critical

critical

high

high