REDHAT-BUG-2443826: Buffer Overflow
Summary: A heap-based buffer overflow (Out-of-Bounds Read) was found in GNU Binutils (bfd linker). The vulnerability occurs in bfd/xcofflink.c in the xcofflinkaddsymbols function. It is caused by an improper check of the xscnlen value, leading to an out-of-bounds access on the csects array. Requirements to exploit: An attacker needs to trick a user into running the ld linker against a specially crafted malicious XCOFF object file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2443826?
The severity of REDHAT-BUG-2443826 is considered high due to the potential for remote code execution via a heap-based buffer overflow.
How do I fix REDHAT-BUG-2443826?
Fixing REDHAT-BUG-2443826 involves updating GNU Binutils to the latest patched version that addresses the out-of-bounds access vulnerability.
Which software is affected by REDHAT-BUG-2443826?
REDHAT-BUG-2443826 affects GNU Binutils specifically in the bfd linker component.
What specific function is vulnerable in REDHAT-BUG-2443826?
The specific function vulnerable in REDHAT-BUG-2443826 is xcoff_link_add_symbols located in bfd/xcofflink.c.
What type of vulnerability is REDHAT-BUG-2443826?
REDHAT-BUG-2443826 is classified as a heap-based buffer overflow vulnerability.