CVE-2019-17451

· MEDIUMModified

← All CVEs

CVSS v3.1

6.5

EPSS

2.40%

Published

Oct 10, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-190

Affected Products (4)

gnu · binutilsvulnerable

opensuse · leapvulnerable

canonical · ubuntu_linuxvulnerable

References (14)

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202007-39

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191024-0002/

Third Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=25070

ExploitIssue TrackingThird Party Advisory

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=336bfbeb1848f4b9558456fdcf283ee8a32d7fd1

https://usn.ubuntu.com/4336-1/

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202007-39

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191024-0002/

Third Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=25070

ExploitIssue TrackingThird Party Advisory

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=336bfbeb1848f4b9558456fdcf283ee8a32d7fd1

https://usn.ubuntu.com/4336-1/

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs