CVE-2006-2362
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.5%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.
- CVSS 3.1
- 7.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- EPSS
- 14.49% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- gnu/binutils
- Source
- cve@mitre.org
References
- http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/20188Third Party Advisory
- http://secunia.com/advisories/20531Third Party Advisory
- http://secunia.com/advisories/20550Third Party Advisory
- http://secunia.com/advisories/22932Third Party Advisory
- http://secunia.com/advisories/27441Third Party Advisory
- http://sourceware.org/bugzilla/show_bug.cgi?id=2584Exploit, Issue Tracking, Third Party Advisory
- http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.htmlIssue Tracking, Mailing List
- http://www.novell.com/linux/security/advisories/2006_26_sr.htmlThird Party Advisory
- http://www.securityfocus.com/bid/17950Exploit, Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018872Third Party Advisory, VDB Entry
- http://www.trustix.org/errata/2006/0034/Broken Link
- http://www.ubuntu.com/usn/usn-292-1Broken Link
- http://www.vupen.com/english/advisories/2006/1924Permissions Required
- http://www.vupen.com/english/advisories/2007/3665Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26644Third Party Advisory, VDB Entry
- http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/20188Third Party Advisory
- http://secunia.com/advisories/20531Third Party Advisory
- http://secunia.com/advisories/20550Third Party Advisory
- http://secunia.com/advisories/22932Third Party Advisory
- http://secunia.com/advisories/27441Third Party Advisory
- http://sourceware.org/bugzilla/show_bug.cgi?id=2584Exploit, Issue Tracking, Third Party Advisory
- http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.htmlIssue Tracking, Mailing List
- http://www.novell.com/linux/security/advisories/2006_26_sr.htmlThird Party Advisory
- http://www.securityfocus.com/bid/17950Exploit, Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018872Third Party Advisory, VDB Entry
- http://www.trustix.org/errata/2006/0034/Broken Link
- http://www.ubuntu.com/usn/usn-292-1Broken Link
- http://www.vupen.com/english/advisories/2006/1924Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.