CVE-2023-25588

Description

A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://access.redhat.com/security/cve/CVE-2023-25588 ↗
• https://bugzilla.redhat.com/show_bug.cgi?id=2167505 ↗
• https://sourceware.org/bugzilla/show_bug.cgi?id=29677 ↗
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1 ↗
• https://security.netapp.com/advisory/ntap-20231103-0003/ ↗