PT-2023-17381 · Gnu+6 · Binutils+6

曾思維 · Publicado 2023-03-29 · Atualizado 2026-04-20 · CVE-2023-1972

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Binutils (affected versions not specified)

Description A potential heap-based buffer overflow was found in the bfd elf slurp version tables() function in bfd/elf.c. This issue may lead to a loss of availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-119

Identificadores relacionados

ALT-PU-2023-5240

ALT-PU-2023-5880

ALT-PU-2024-9331

AZL-26754

BDU:2026-01797

CLEANSTART-2026-HF39630

CVE-2023-1972

ECHO-9454-EFCE-116B

MGASA-2024-0246

OESA-2023-1592

OESA-2023-1593

OESA-2023-1594

OPENSUSE-SU-2023_3825-1

OPENSUSE-SU-2024:13411-1

ROSA-SA-2025-2645

SUSE-SU-2023:3695-1

SUSE-SU-2023:3825-1

USN-6101-1

USN-6842-1

Produtos afetados

Alt Linux

Binutils

Debian

Linuxmint

Red Os

Suse

Ubuntu

Referências · 114

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HF39630.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HF39630 · Nota
• https://bdu.fstec.ru/vul/2026-01797 · Nota de Segurança
• https://bugzilla.suse.com/1214579 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-48064 · Nota de Segurança
• https://suse.com/security/cve/CVE-2022-4285 · Nota
• https://osv.dev/vulnerability/CVE-2018-20002 · Nota
• https://osv.dev/vulnerability/CVE-2018-20712 · Nota
• https://osv.dev/vulnerability/CVE-2023-1972 · Aviso do Fabricante
• https://bugzilla.suse.com/1214580 · Nota
• https://bugzilla.suse.com/1214619 · Nota
• https://osv.dev/vulnerability/MGASA-2024-0246 · Aviso do Fabricante
• https://altsp.su/obnovleniya-bezopasnosti · Nota
• https://ubuntu.com/security/CVE-2023-39129 · Aviso do Fabricante
• https://bugzilla.suse.com/1214623 · Nota