search

tamirverthim / src

Public git conversion mirror of OpenBSD's official cvs src repository.
https://www.openbsd.org
0 stars 0 forks source link

CVE-2023-25588 (Low) detected in src7b6d306a3e61de7ebaab494fc46227d42f2b6f0e, srcdc68203c791d61132fb706541d939ef160c2e638 #68

Open mend-for-github-com[bot] opened 1 year ago

mend-for-github-com[bot] commented 1 year ago

CVE-2023-25588 - Low Severity Vulnerability

Vulnerable Libraries - src7b6d306a3e61de7ebaab494fc46227d42f2b6f0e, srcdc68203c791d61132fb706541d939ef160c2e638

Vulnerability Details

binutils: Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

Publish Date: 2023-02-13

URL: CVE-2023-25588

CVSS 3 Score Details (2.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: Low

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://bugzilla.redhat.com/show_bug.cgi?id=2167505

Release Date: 2023-02-13

Fix Resolution: binutils-2_40