PT-2023-17381 · Gnu+6 · Binutils+6

曾思維 · Published 2023-03-29 · Updated 2026-04-20 · CVE-2023-1972

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Binutils (affected versions not specified)

Description A potential heap-based buffer overflow was found in the bfd elf slurp version tables() function in bfd/elf.c. This issue may lead to a loss of availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALT-PU-2023-5240

ALT-PU-2023-5880

ALT-PU-2024-9331

AZL-26754

BDU:2026-01797

CLEANSTART-2026-HF39630

CVE-2023-1972

ECHO-9454-EFCE-116B

MGASA-2024-0246

OESA-2023-1592

OESA-2023-1593

OESA-2023-1594

OPENSUSE-SU-2023_3825-1

OPENSUSE-SU-2024:13411-1

ROSA-SA-2025-2645

SUSE-SU-2023:3695-1

SUSE-SU-2023:3825-1

USN-6101-1

USN-6842-1

Affected Products

Alt Linux

Binutils

Debian

Linuxmint

Red Os

Suse

Ubuntu

References · 114

• https://bdu.fstec.ru/vul/2026-01797 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48064 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1972 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0246 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-39129 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-26754 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4285 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1972 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-1972 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-25584 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1594 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6842-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6101-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2023-1972 · Vendor Advisory