{"id":"CVE-2023-25588","state":"PUBLISHED","title":"Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`","description":"A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.","publishedAt":"2023-09-14T20:47:16.974Z","updatedAt":"2025-02-13T16:44:33.622Z","severity":{"score":4.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","source":"redhat"},"assigner":"redhat","products":["n/a binutils","Red Hat Red Hat Enterprise Linux 6","Red Hat Red Hat Enterprise Linux 7","Red Hat Red Hat Enterprise Linux 8","Red Hat Red Hat Enterprise Linux 9","Fedora Fedora 37","Fedora Extra Packages for Enterprise Linux 8","Fedora Fedora 36","Fedora Extra Packages for Enterprise Linux 7","Fedora Fedora"],"affected":[{"vendor":"n/a","product":"binutils","defaultStatus":"affected"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gcc-toolset-11-binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gcc-toolset-12-binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"gcc-toolset-12-binutils","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Fedora","product":"Fedora 37","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux 8","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux 7","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 37","packageName":"mingw-binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 37","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 37","packageName":"insight","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"insight","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"mingw-binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux 8","packageName":"rizin","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"rizin","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"}],"references":["https://access.redhat.com/security/cve/CVE-2023-25588","https://bugzilla.redhat.com/show_bug.cgi?id=2167505","https://sourceware.org/bugzilla/show_bug.cgi?id=29677","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1","https://security.netapp.com/advisory/ntap-20231103-0003/"],"weaknesses":["CWE-457"],"ingestedAt":"2026-10-29T20:05:43.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/25xxx/CVE-2023-25588.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-25588","state":"PUBLISHED","datePublished":"2023-09-14T20:47:16.974Z","dateUpdated":"2025-02-13T16:44:33.622Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2023-02-07T19:03:20.221Z"},"containers":{"cna":{"title":"Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`","descriptions":[{"lang":"en","value":"A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service."}],"affected":[{"vendor":"n/a","product":"binutils","defaultStatus":"affected"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gcc-toolset-11-binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gcc-toolset-12-binutils","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"gcc-toolset-12-binutils","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Fedora","product":"Fedora 37","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux 8","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux 7","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora","packageName":"binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 37","packageName":"mingw-binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 37","packageName":"radare2","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 37","packageName":"insight","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"insight","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"mingw-binutils","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux 8","packageName":"rizin","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"},{"vendor":"Fedora","product":"Fedora 36","packageName":"rizin","defaultStatus":"unaffected","collectionURL":"https://packages.fedoraproject.org/"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-25588","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167505","name":"RHBZ#2167505","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29677"},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1"},{"url":"https://security.netapp.com/advisory/ntap-20231103-0003/"}],"metrics":[{"other":{"content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-457","description":"Use of Uninitialized Variable","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2023-11-04T05:07:12.363Z"},"datePublic":"2022-12-12T00:00:00.000Z","x_redhatCweChain":"CWE-457: Use of Uninitialized Variable","timeline":[{"lang":"en","time":"2023-01-12T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2022-12-12T00:00:00.000Z","value":"Made public."}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-25588","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167505","name":"RHBZ#2167505","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29677","tags":["x_transferred"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231103-0003/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T11:25:19.353Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-25T18:22:06.630431Z","id":"CVE-2023-25588","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-25T18:22:15.590Z"}}]}}}