search

tamirverthim / src

Public git conversion mirror of OpenBSD's official cvs src repository.
https://www.openbsd.org
0 stars 0 forks source link

CVE-2023-1579 (High) detected in src7b6d306a3e61de7ebaab494fc46227d42f2b6f0e, srcdc68203c791d61132fb706541d939ef160c2e638 #67

Open mend-for-github-com[bot] opened 1 year ago

mend-for-github-com[bot] commented 1 year ago

CVE-2023-1579 - High Severity Vulnerability

Vulnerable Libraries - src7b6d306a3e61de7ebaab494fc46227d42f2b6f0e, srcdc68203c791d61132fb706541d939ef160c2e638

Vulnerability Details

Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.

Publish Date: 2023-04-03

URL: CVE-2023-1579

CVSS 3 Score Details (7.8)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://sourceware.org/bugzilla/show_bug.cgi?id=29988

Release Date: 2023-03-23

Fix Resolution: binutils-2_40