What’s Vulnerable › Vulnerabilities

CVE-2023-1972

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-17 · updated 2026-06-17
• Weakness: CWE-119

Description

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.

Affected products

• GNU Binutils: from 2.35 through 2.40

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2185646
• https://security.gentoo.org/glsa/202309-15
• https://sourceware.org/bugzilla/show_bug.cgi?id=30285
• https://bugzilla.redhat.com/show_bug.cgi?id=2185646
• https://security.gentoo.org/glsa/202309-15
• https://sourceware.org/bugzilla/show_bug.cgi?id=30285

Get alerted when CVE-2023-1972 or the next vulnerability affects your stack