CVE-2023-25584
Fixed in a distro release EPSS <1%CVSS 6.3
An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Extra Packages for Enterprise Linux 8, Fedora 37, Fedora 36, Fedora, Fedora Extra Packages for Enterprise Linux 7
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | binutils | 2.39.50.20221224-1 |
| Debian 13 | binutils | 2.39.50.20221224-1 |
| Debian 14 | binutils | 2.39.50.20221224-1 |
| Ubuntu 18.04 LTS | binutils | 2.30-21ubuntu1~18.04.9 |
| Ubuntu 20.04 LTS | binutils | 2.34-6ubuntu1.5 |
| Ubuntu 22.04 LTS | binutils | 2.38-4ubuntu2.2 |
| Ubuntu Pro 14.04 LTS | binutils | no fix |
| Ubuntu Pro 14.04 LTS | binutils | 2.24-5ubuntu14.2+esm1 |
| Ubuntu Pro 16.04 LTS | binutils | no fix |
| Ubuntu Pro 16.04 LTS | binutils | 2.26.1-1ubuntu1~16.04.8+esm6 |