ALPINE-CVE-2023-1972 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2023-1972 PUBLISHED CVSS 6.5 MEDIUM

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.

Risk Scores

CVSS v3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.20	binutils	2.34-r1, 2.40-r9, 2.40-r8
Alpine:v3.23	binutils	0, 2.40-r9, 2.40-r8
Alpine:v3.21	binutils	2.28-r0, 0, 2.20.51.0.12-r0
Alpine:v3.18	binutils	2.40-r6, 2.40-r5, 2.40-r4
Alpine:v3.19	binutils	0, 2.28-r2, 2.40-r9
Alpine:v3.22	binutils	0, 2.20.51.0.12-r0, 2.20.51.0.4-r1

Timeline

May 17, 2023 CVE Published
Dec 3, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2023-1972 advisory

Open in Interactive Console →