Bug 2233934 (CVE-2020-19726)

Summary:	CVE-2020-19726 binutils: heap-based buffer overflow in bfd_getl32() in bfd/libbfd.c
Product:	[Other] Security Response	Reporter:	Guilherme de Almeida Suckevicz <gsuckevi>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	acrosby, ailan, bdettelb, caswilli, darunesh, desktop-qa-list, fjansen, fweimer, gdb-bugs, hkataria, jburrell, jmitchel, jsamir, jsherril, jtanner, kaycoth, keiths, kshier, mcermak, mpolacek, mprchlik, nickc, ohudlick, psegedy, rjones, sipoyare, sthirugn, tsasak, virt-maint, vkrizan
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A heap-based buffer overflow was found in binutils in the bfd_getl32() function, relating to the auxiliary symbol data. This flaw allows an attacker to read or write to system memory or cause a denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-11-09 09:15:04 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2233938, 2233939, 2233940, 2234059, 2234060, 2234061, 2234062, 2234063, 2234064, 2234065, 2234066, 2234067, 2234068, 2234069, 2234070, 2234071, 2234072, 2234073
Bug Blocks:	2233947

Description Guilherme de Almeida Suckevicz 2023-08-23 19:06:36 UTC

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

References:
https://sourceware.org/bugzilla/show_bug.cgi?id=26241
https://sourceware.org/bugzilla/show_bug.cgi?id=26240

Comment 1 Guilherme de Almeida Suckevicz 2023-08-23 19:10:58 UTC

Created binutils tracking bugs for this issue:

Affects: fedora-all [bug 2233938]


Created gdb tracking bugs for this issue:

Affects: fedora-all [bug 2233939]


Created mingw-binutils tracking bugs for this issue:

Affects: fedora-all [bug 2233940]