Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
USN-6101-1 (UBUNTU-CVE-2023-1579)
Vulnerability from osv_ubuntu – Published: 2023-05-24 08:57 – Updated: 2026-06-29 10:53 – Source website
VLAI
Summary
binutils vulnerabilities
Details
It was discovered that GNU binutils incorrectly handled certain DWARF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 22.10. (CVE-2023-1579)
It was discovered that GNU binutils did not properly verify the version definitions in zer0-lengthverdef table. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. (CVE-2023-1972)
It was discovered that GNU binutils did not properly validate the size of length parameter in vms-alpha. An attacker could possibly use this issue to cause a crash or access sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2023-25584)
It was discovered that GNU binutils did not properly initialized the file_table field of struct module and the_bfd field of asymbol. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-25585, CVE-2023-25588)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2023-25585",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25588",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:Pro:14.04:LTS"
}
},
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.24-5ubuntu14.2+esm1"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.24-5ubuntu14.2+esm1"
},
{
"binary_name": "binutils-source",
"binary_version": "2.24-5ubuntu14.2+esm1"
},
{
"binary_name": "binutils-static",
"binary_version": "2.24-5ubuntu14.2+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm1?arch=source\u0026distro=trusty/esm"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.24-5ubuntu14.2+esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.23.52.20130913-0ubuntu1",
"2.23.90.20131017-1ubuntu1",
"2.23.90.20131116-1ubuntu1",
"2.23.91.20131123-1ubuntu1",
"2.24-1ubuntu1",
"2.24-1ubuntu2",
"2.24-2ubuntu1",
"2.24-2ubuntu2",
"2.24-2ubuntu3",
"2.24-4ubuntu1",
"2.24-5ubuntu1",
"2.24-5ubuntu2",
"2.24-5ubuntu3",
"2.24-5ubuntu3.1",
"2.24-5ubuntu13",
"2.24-5ubuntu14",
"2.24-5ubuntu14.1",
"2.24-5ubuntu14.2"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2023-25585",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25588",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-mips-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-mips64-linux-gnuabi64",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-mips64el-linux-gnuabi64",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-mipsel-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-powerpc-linux-gnuspe",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-source",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm6"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm6?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.26.1-1ubuntu1~16.04.8+esm6"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.25.1-6ubuntu1",
"2.25.51.20151022-0ubuntu2",
"2.25.51.20151022-0ubuntu3",
"2.25.51.20151027-0ubuntu1",
"2.25.51.20151028-0ubuntu1",
"2.25.51.20151106-0ubuntu1",
"2.25.51.20151113-1ubuntu1",
"2.25.51.20151113-2ubuntu1",
"2.25.90.20151125-1ubuntu1",
"2.25.90.20151125-2ubuntu1",
"2.25.90.20151211-0ubuntu1",
"2.25.90.20151211-0ubuntu2",
"2.25.90.20160101-1ubuntu1",
"2.25.90.20160101-1ubuntu2",
"2.26-2ubuntu1",
"2.26-3ubuntu1",
"2.26-4ubuntu1",
"2.26-5ubuntu1",
"2.26-6ubuntu1",
"2.26-7ubuntu2",
"2.26-8ubuntu1",
"2.26-8ubuntu2",
"2.26-8ubuntu2.1",
"2.26.1-1ubuntu1~16.04",
"2.26.1-1ubuntu1~16.04.1",
"2.26.1-1ubuntu1~16.04.3",
"2.26.1-1ubuntu1~16.04.4",
"2.26.1-1ubuntu1~16.04.5",
"2.26.1-1ubuntu1~16.04.6",
"2.26.1-1ubuntu1~16.04.7",
"2.26.1-1ubuntu1~16.04.8",
"2.26.1-1ubuntu1~16.04.8+esm1",
"2.26.1-1ubuntu1~16.04.8+esm3",
"2.26.1-1ubuntu1~16.04.8+esm4",
"2.26.1-1ubuntu1~16.04.8+esm5"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2023-25584",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25585",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25588",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-common",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-for-build",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-for-host",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-i686-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-i686-kfreebsd-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-i686-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-ia64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mips-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mips64-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mips64-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mips64el-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mips64el-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mipsel-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mipsisa32r6-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mipsisa32r6el-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-powerpc-linux-gnuspe",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-riscv64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-source",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-x86-64-kfreebsd-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-x86-64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "binutils-x86-64-linux-gnux32",
"binary_version": "2.30-21ubuntu1~18.04.9"
},
{
"binary_name": "libbinutils",
"binary_version": "2.30-21ubuntu1~18.04.9"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.9?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.30-21ubuntu1~18.04.9"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.29.1-4ubuntu1",
"2.29.1-6ubuntu1",
"2.29.1-7ubuntu1",
"2.29.1-8ubuntu1",
"2.29.1-10ubuntu1",
"2.29.1-12ubuntu1",
"2.30-4ubuntu1",
"2.30-5ubuntu1",
"2.30-7ubuntu1",
"2.30-8ubuntu1",
"2.30-9ubuntu1",
"2.30-10ubuntu1",
"2.30-11ubuntu1",
"2.30-14ubuntu2",
"2.30-15ubuntu1",
"2.30-20ubuntu2~18.04",
"2.30-21ubuntu1~18.04",
"2.30-21ubuntu1~18.04.1",
"2.30-21ubuntu1~18.04.2",
"2.30-21ubuntu1~18.04.3",
"2.30-21ubuntu1~18.04.4",
"2.30-21ubuntu1~18.04.5",
"2.30-21ubuntu1~18.04.7",
"2.30-21ubuntu1~18.04.8"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2023-25584",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25585",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25588",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-common",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-for-build",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-for-host",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-i686-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-i686-kfreebsd-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-i686-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-ia64-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-riscv64-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-source",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-x86-64-kfreebsd-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-x86-64-linux-gnu",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "binutils-x86-64-linux-gnux32",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "libbinutils",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "libctf-nobfd0",
"binary_version": "2.34-6ubuntu1.5"
},
{
"binary_name": "libctf0",
"binary_version": "2.34-6ubuntu1.5"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.34-6ubuntu1.5?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.34-6ubuntu1.5"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.33-2ubuntu1",
"2.33.1-1ubuntu1",
"2.33.1-5ubuntu1",
"2.33.1-6ubuntu1",
"2.33.1-6ubuntu3",
"2.33.90.20200122-1ubuntu2",
"2.34-1ubuntu1",
"2.34-3ubuntu1",
"2.34-4ubuntu1",
"2.34-5ubuntu1",
"2.34-6ubuntu1",
"2.34-6ubuntu1.1",
"2.34-6ubuntu1.3",
"2.34-6ubuntu1.4"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2023-1972",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25584",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25585",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2023-25588",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-common",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-for-build",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-for-host",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-i686-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-i686-kfreebsd-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-i686-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-ia64-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-riscv64-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-source",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-x86-64-kfreebsd-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-x86-64-linux-gnu",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "binutils-x86-64-linux-gnux32",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "libbinutils",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "libctf-nobfd0",
"binary_version": "2.38-4ubuntu2.2"
},
{
"binary_name": "libctf0",
"binary_version": "2.38-4ubuntu2.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.38-4ubuntu2.2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.38-4ubuntu2.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.37-7ubuntu1",
"2.37-9ubuntu1",
"2.37-10ubuntu1",
"2.37.50.20220106-2ubuntu1",
"2.37.90.20220126-0ubuntu1",
"2.37.90.20220130-0ubuntu2",
"2.38-1ubuntu1",
"2.38-2ubuntu1",
"2.38-3ubuntu1",
"2.38-4ubuntu2",
"2.38-4ubuntu2.1"
]
}
],
"aliases": [],
"details": "It was discovered that GNU binutils incorrectly handled certain DWARF\nfiles. An attacker could possibly use this issue to cause a crash or\nexecute arbitrary code. This issue only affected Ubuntu 22.10.\n(CVE-2023-1579)\n\nIt was discovered that GNU binutils did not properly verify the version\ndefinitions in zer0-lengthverdef table. An attacker could possibly use this\nissue to cause a crash or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. (CVE-2023-1972)\n\nIt was discovered that GNU binutils did not properly validate the size of\nlength parameter in vms-alpha. An attacker could possibly use this issue to\ncause a crash or access sensitive information. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10.\n(CVE-2023-25584)\n\nIt was discovered that GNU binutils did not properly initialized the\nfile_table field of struct module and the_bfd field of asymbol. An attacker\ncould possibly use this issue to cause a crash. This issue only affected\nUbuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2023-25585, CVE-2023-25588)\n",
"id": "USN-6101-1",
"modified": "2026-06-29T10:53:02Z",
"published": "2023-05-24T08:57:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-6101-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-1579"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-1972"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-25584"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-25585"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-25588"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "binutils vulnerabilities",
"upstream": [
"UBUNTU-CVE-2023-1579",
"UBUNTU-CVE-2023-1972",
"UBUNTU-CVE-2023-25584",
"UBUNTU-CVE-2023-25585",
"UBUNTU-CVE-2023-25588"
]
}