Bug 2180905 (CVE-2023-1579)

Summary:	CVE-2023-1579 binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64
Product:	[Other] Security Response	Reporter:	Pedro Sampaio <psampaio>
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	ailan, bdettelb, caswilli, crizzo, derrick.roach.ctr, dffrench, dfreiber, dkuc, doconnor, drow, fjansen, fweimer, gdb-bugs, gzaronik, hkataria, jburrell, jkoehler, jmitchel, jsamir, jtanner, kaycoth, keiths, kholdawa, kshier, lcouzens, lphiri, mcermak, micjohns, mpolacek, mprchlik, mskarbek, ngough, nickc, ohudlick, rgodfrey, rjones, sipoyare, sthirugn, teagle, virt-maint, vkrizan, vkumar
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	binutils 2.40	Doc Type:	If docs needed, set a value
Doc Text:	A heap based buffer overflow was found in binutils-gdb/bfd/libbfd.c in bfd_getl64 in binutils.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2181203, 2181204, 2181205, 2181206, 2181207, 2181208, 2181209, 2181210, 2181211, 2181212, 2181213, 2181214, 2181215, 2181216, 2184931, 2184932, 2184933, 2184934, 2184935, 2184936, 2184937, 2184938, 2185537, 2185542, 2185543, 2185544, 2185545, 2185546, 2185547, 2185548, 2185549, 2185550, 2185551, 2185552
Bug Blocks:	2180906

Description Pedro Sampaio 2023-03-22 15:21:09 UTC

Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.

References:

https://sourceware.org/bugzilla/show_bug.cgi?id=29988

Comment 3 Dhananjay Arunesh 2023-03-23 10:13:06 UTC

Created binutils tracking bugs for this issue:

Affects: fedora-36 [bug 2181207]
Affects: fedora-37 [bug 2181213]
Affects: fedora-all [bug 2181203]


Created gdb tracking bugs for this issue:

Affects: fedora-36 [bug 2181208]


Created insight tracking bugs for this issue:

Affects: fedora-36 [bug 2181209]
Affects: fedora-37 [bug 2181214]


Created mingw-binutils tracking bugs for this issue:

Affects: fedora-36 [bug 2181210]
Affects: fedora-37 [bug 2181215]


Created radare2 tracking bugs for this issue:

Affects: epel-7 [bug 2181204]
Affects: epel-8 [bug 2181205]
Affects: fedora-36 [bug 2181211]
Affects: fedora-37 [bug 2181216]


Created rizin tracking bugs for this issue:

Affects: epel-8 [bug 2181206]
Affects: fedora-36 [bug 2181212]

Comment 14 errata-xmlrpc 2024-04-30 10:04:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:2353 https://access.redhat.com/errata/RHSA-2024:2353