Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-25586

Fixed in a distro release EPSS <1%CVSS 4.7

A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.

Published 2023-09-14 · CVE record · OSV

Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora 36, Fedora 37, Fedora Extra Packages for Enterprise Linux 7, Fedora, Fedora Extra Packages for Enterprise Linux 8

Distro releases

ReleasePackageFixed in
Debian 12binutils2.39.50.20221208-1
Debian 13binutils2.39.50.20221208-1
Debian 14binutils2.39.50.20221208-1