REDHAT-BUG-2399943: Buffer Overflow
A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNU Binutilsto a version that resolves this vulnerability.Fixed in 2.46Patch ea1a0737c7692737a644af0486b71e4a392cbca8 - Compensating control
Since the flaw is restricted to local execution, limit local access to the affected binutils/linker tooling (e.g., restrict who can execute the impacted local code paths) to reduce exposure to the published exploit.
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2399943?
REDHAT-BUG-2399943 is considered a high-severity vulnerability due to the potential for heap-based buffer overflow.
How do I fix REDHAT-BUG-2399943?
To fix REDHAT-BUG-2399943, users should upgrade to a version of GNU Binutils that is newer than 2.45.
What versions of GNU Binutils are affected by REDHAT-BUG-2399943?
GNU Binutils version 2.45 and below are affected by REDHAT-BUG-2399943.
What component is impacted in REDHAT-BUG-2399943?
The impacted component in REDHAT-BUG-2399943 is the Linker, specifically the function _bfd_elf_parse_eh_frame.
Is the exploit for REDHAT-BUG-2399943 remote or local?
The exploit for REDHAT-BUG-2399943 requires local execution, making it a local attack vector.