Heap-based buffer overflow in Binutils - CVE-2023-1579

Vulnerability identifier: #VU76485

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-1579

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the bfd_getl64() function in binutils-gdb/bfd/libbfd.c. A remote attacker can pass specially crafted file to the application, trigger a heap-based buffer overflow and perform a denial of service (DoS) attack.

Binutils
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Software Development Kit 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Development Tools Module
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
Fedora
mingw-zlib (Red Hat package)
binutils
mingw-binutils
sys-devel/binutils
mingw-binutils (Red Hat package)
binutils-debuginfo
binutils-gold
binutils-debugsource
binutils-devel
binutils-gold-debuginfo
libctf-nobfd0-debuginfo
libctf-nobfd0
libctf0
libctf0-debuginfo
cross-xtensa-binutils-debugsource
cross-m68k-binutils-debugsource
cross-hppa-binutils-debuginfo
cross-ppc64-binutils
cross-epiphany-binutils-debugsource
cross-sparc-binutils-debugsource
cross-avr-binutils-debugsource
cross-avr-binutils-debuginfo
cross-s390-binutils-debuginfo
cross-rx-binutils-debuginfo
cross-ia64-binutils-debuginfo
cross-i386-binutils
cross-ppc64-binutils-debuginfo
cross-hppa-binutils
cross-mips-binutils-debuginfo
cross-m68k-binutils
cross-rx-binutils-debugsource
cross-aarch64-binutils-debugsource
cross-x86_64-binutils-debugsource
cross-s390x-binutils-debuginfo
cross-s390x-binutils
cross-s390x-binutils-debugsource
cross-ppc64le-binutils-debugsource
cross-ppc64le-binutils
cross-ppc64le-binutils-debuginfo
cross-aarch64-binutils
cross-aarch64-binutils-debuginfo
cross-spu-binutils
binutils-devel-32bit
cross-riscv64-binutils-debuginfo
cross-mips-binutils
cross-mips-binutils-debugsource
cross-spu-binutils-debugsource
cross-s390-binutils
cross-ppc-binutils-debuginfo
cross-arm-binutils
cross-ia64-binutils
cross-ppc-binutils-debugsource
cross-ppc-binutils
cross-xtensa-binutils
cross-s390-binutils-debugsource
cross-sparc64-binutils-debuginfo
cross-sparc64-binutils
cross-avr-binutils
cross-spu-binutils-debuginfo
cross-ia64-binutils-debugsource
cross-sparc-binutils
cross-hppa-binutils-debugsource
cross-hppa64-binutils-debuginfo
cross-sparc-binutils-debuginfo
cross-hppa64-binutils-debugsource
cross-x86_64-binutils-debuginfo
cross-x86_64-binutils
cross-i386-binutils-debuginfo
cross-riscv64-binutils-debugsource
cross-epiphany-binutils-debuginfo
cross-i386-binutils-debugsource
cross-xtensa-binutils-debuginfo
cross-rx-binutils
cross-m68k-binutils-debuginfo
cross-arm-binutils-debugsource
cross-arm-binutils-debuginfo
cross-hppa64-binutils
cross-sparc64-binutils-debugsource
cross-ppc64-binutils-debugsource
cross-riscv64-binutils
cross-epiphany-binutils
mingw-libffi (Red Hat package)
mingw-crt (Red Hat package)
mingw-headers (Red Hat package)
mingw-winpthreads (Red Hat package)
mingw-w64-tools (Red Hat package)
mingw-gcc (Red Hat package)
mingw-filesystem (Red Hat package)
ObjectScale
RecoverPoint for VMs
Dell EMC VxRail Appliance

Install updates from vendor's website.

Binutils - update to 2.40
mingw-zlib (Red Hat package) - update to 1.3.1-1.el9
ObjectScale - update to 1.4.0
binutils - update to 2.39-6
mingw-binutils - update to 2.39-6.fc38
sys-devel/binutils - update to 2.40
mingw-binutils (Red Hat package) - update to 2.41-3.el9
binutils-debuginfo - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
binutils-gold - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
binutils-debugsource - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
binutils-devel - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
binutils-gold-debuginfo - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
libctf-nobfd0-debuginfo - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
libctf-nobfd0 - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
binutils - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
libctf0 - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
libctf0-debuginfo - addressed in versions 2.41-9.53.1, 2.41-150100.7.46.1
cross-xtensa-binutils-debugsource - update to 2.41-150100.7.46.1
cross-m68k-binutils-debugsource - update to 2.41-150100.7.46.1
cross-hppa-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-ppc64-binutils - update to 2.41-150100.7.46.1
cross-epiphany-binutils-debugsource - update to 2.41-150100.7.46.1
cross-sparc-binutils-debugsource - update to 2.41-150100.7.46.1
cross-avr-binutils-debugsource - update to 2.41-150100.7.46.1
cross-avr-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-s390-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-rx-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-ia64-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-i386-binutils - update to 2.41-150100.7.46.1
cross-ppc64-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-hppa-binutils - update to 2.41-150100.7.46.1
cross-mips-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-m68k-binutils - update to 2.41-150100.7.46.1
cross-rx-binutils-debugsource - update to 2.41-150100.7.46.1
cross-aarch64-binutils-debugsource - update to 2.41-150100.7.46.1
cross-x86_64-binutils-debugsource - update to 2.41-150100.7.46.1
cross-s390x-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-s390x-binutils - update to 2.41-150100.7.46.1
cross-s390x-binutils-debugsource - update to 2.41-150100.7.46.1
cross-ppc64le-binutils-debugsource - update to 2.41-150100.7.46.1
cross-ppc64le-binutils - update to 2.41-150100.7.46.1
cross-ppc64le-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-aarch64-binutils - update to 2.41-150100.7.46.1
cross-aarch64-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-spu-binutils - update to 2.41-150100.7.46.1
binutils-devel-32bit - update to 2.41-150100.7.46.1
cross-riscv64-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-mips-binutils - update to 2.41-150100.7.46.1
cross-mips-binutils-debugsource - update to 2.41-150100.7.46.1
cross-spu-binutils-debugsource - update to 2.41-150100.7.46.1
cross-s390-binutils - update to 2.41-150100.7.46.1
cross-ppc-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-arm-binutils - update to 2.41-150100.7.46.1
cross-ia64-binutils - update to 2.41-150100.7.46.1
cross-ppc-binutils-debugsource - update to 2.41-150100.7.46.1
cross-ppc-binutils - update to 2.41-150100.7.46.1
cross-xtensa-binutils - update to 2.41-150100.7.46.1
cross-s390-binutils-debugsource - update to 2.41-150100.7.46.1
cross-sparc64-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-sparc64-binutils - update to 2.41-150100.7.46.1
cross-avr-binutils - update to 2.41-150100.7.46.1
cross-spu-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-ia64-binutils-debugsource - update to 2.41-150100.7.46.1
cross-sparc-binutils - update to 2.41-150100.7.46.1
cross-hppa-binutils-debugsource - update to 2.41-150100.7.46.1
cross-hppa64-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-sparc-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-hppa64-binutils-debugsource - update to 2.41-150100.7.46.1
cross-x86_64-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-x86_64-binutils - update to 2.41-150100.7.46.1
cross-i386-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-riscv64-binutils-debugsource - update to 2.41-150100.7.46.1
cross-epiphany-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-i386-binutils-debugsource - update to 2.41-150100.7.46.1
cross-xtensa-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-rx-binutils - update to 2.41-150100.7.46.1
cross-m68k-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-arm-binutils-debugsource - update to 2.41-150100.7.46.1
cross-arm-binutils-debuginfo - update to 2.41-150100.7.46.1
cross-hppa64-binutils - update to 2.41-150100.7.46.1
cross-sparc64-binutils-debugsource - update to 2.41-150100.7.46.1
cross-ppc64-binutils-debugsource - update to 2.41-150100.7.46.1
cross-riscv64-binutils - update to 2.41-150100.7.46.1
cross-epiphany-binutils - update to 2.41-150100.7.46.1
mingw-libffi (Red Hat package) - update to 3.4.4-5.el9
RecoverPoint for VMs - update to 6.0.SP1.P1
Dell EMC VxRail Appliance - update to 8.0.120
mingw-crt (Red Hat package) - update to 11.0.1-3.el9
mingw-headers (Red Hat package) - update to 11.0.1-3.el9
mingw-winpthreads (Red Hat package) - update to 11.0.1-3.el9
mingw-w64-tools (Red Hat package) - update to 11.0.1-3.el9
mingw-gcc (Red Hat package) - update to 13.2.1-7.el9
mingw-filesystem (Red Hat package) - update to 148-3.el9

• https://sourceware.org/bugzilla/show_bug.cgi?id=29988
• https://security.netapp.com/advisory/ntap-20230511-0009/
• https://bugzilla.redhat.com/show_bug.cgi?id=2180905

• Fedora 38 update for mingw-binutils
• Red Hat Enterprise Linux 9 update for mingw components
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Dell ObjectScale
• SUSE update for binutils
• SUSE update for binutils
• Gentoo update for GNU Binutils
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Amazon Linux AMI update for binutils