CVE-2024-57360: Medium severity GNU binutils vulnerability
https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.43.50.20241221-1 - Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.44-3Fixed in 2.47.50.20261021-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57360?
CVE-2024-57360 has been rated as a medium severity vulnerability due to its local exploitation characteristics.
How do I fix CVE-2024-57360?
To fix CVE-2024-57360, update to a version of GNU Binutils greater than 2.43 that has addressed this access control issue.
What components are affected by CVE-2024-57360?
CVE-2024-57360 specifically affects the `nm --without-symbol-version` function in GNU Binutils.
Who is affected by CVE-2024-57360?
Users of GNU Binutils version 2.43 and earlier who utilize the `nm --without-symbol-version` function are affected by CVE-2024-57360.
What type of vulnerability is CVE-2024-57360?
CVE-2024-57360 is categorized as an Incorrect Access Control vulnerability.