VDB
DEBIAN-CVE-2023-25588
DEBIAN-CVE-2023-25588
PUBLISHED
CVSS 5.5 MEDIUM
A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | binutils | 2.44.50.20250528-1, 2.43.1-3, 2.38-3 |
| Debian:12 | binutils | 0, 0, 0 |
| Debian:14 | binutils | 0, 0, 0 |
| Debian:13 | binutils | 0, 0, 0 |
Timeline
- Sep 14, 2023 CVE Published
- Apr 28, 2026 CVE Updated