CVE-2005-4808 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Binutils

7 documents7 sources

Severity

7.6HIGHNVD

EPSS

1.1%

top 21.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

GNU Binutils Canonical Ubuntu Linux

Timeline

PublishedDec 31

Latest updateMay 1

Description

Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 4.9 | Impact: 10.0

Affected Packages2 packages

▶NVDgnu/binutils< 2.17

▶Debiangnu/binutils< 2.17-1+3

Also affects: Ubuntu Linux 5.10

Patches

Patch: sources.redhat.com ↗Patch: sources.redhat.com ↗

🔴Vulnerability Details

GHSA

GHSA-28h9-hh7q-86j5: Buffer overflow in reset_vars in config/tc-crx↗2022-05-01

▶

CVEList

CVE-2005-4808: Buffer overflow in reset_vars in config/tc-crx↗2006-08-18

▶

OSV

CVE-2005-4808: Buffer overflow in reset_vars in config/tc-crx↗2005-12-31

▶

📋Vendor Advisories

Ubuntu

binutils vulnerability↗2006-10-18

▶

Debian

CVE-2005-4808: binutils - Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler i...↗2005

▶

Red Hat

CVE-2005-4808: Buffer overflow in reset_vars in config/tc-crx↗

▶