CVE-2023-25586
Fixed in a distro release EPSS <1%CVSS 4.7
A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora 36, Fedora 37, Fedora Extra Packages for Enterprise Linux 7, Fedora, Fedora Extra Packages for Enterprise Linux 8
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | binutils | 2.39.50.20221208-1 |
| Debian 13 | binutils | 2.39.50.20221208-1 |
| Debian 14 | binutils | 2.39.50.20221208-1 |