The version of binutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-1972 advisory.

  - A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may     lead to loss of availability. (CVE-2023-1972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8a6a30c142 advisory.

    Disable stringop-overflow warnings.
    Patch bfd-CVE-2023-1972 fixes a security issue in bfd library.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-229 advisory.

    Potential heap based buffer overflow found in _bfd_elf_slurp_version_tables() in bfd/elf.c.
    (CVE-2023-1972)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5d51a42413 advisory.

    Disable stringop-overflow warnings.
    Patch bfd-CVE-2023-1972 fixes a security issue in bfd library.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Field `the_bfd` of `asymbol` is uninitialized in function     `bfd_mach_o_get_synthetic_symtab`.(CVE-2023-25588)

    Field `file_table` of `struct module *module` is uninitialized.(CVE-2023-25585)

    A flaw was found in binutils, where there is a NULL pointer segmentation fault when accessing the field     `the_bfd` in the `compare_symbols` function. This flaw may cause a crash to the objdump binary when     reading a crafted file, impacting availability.(CVE-2023-25587)

    A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may     lead to loss of availability.(CVE-2023-1972)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization binutils security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6842-1 advisory.

    It was discovered that gdb incorrectly handled certain memory operations when parsing an ELF file. An     attacker could possibly use this issue to cause a denial of service. This issue is the result of an     incomplete fix for CVE-2020-16599. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-4285)

    It was discovered that gdb incorrectly handled memory leading to a heap based buffer overflow. An attacker     could use this

    issue to cause a denial of service, or possibly execute

    arbitrary code. This issue only affected Ubuntu 22.04 LTS.

    (CVE-2023-1972)

    It was discovered that gdb incorrectly handled memory leading to a stack overflow. An attacker could     possibly use this issue to cause a denial of service. This issue only affected

    Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.

    (CVE-2023-39128)

    It was discovered that gdb had a use after free vulnerability under certain circumstances. An attacker     could use this to cause

    a denial of service or possibly execute arbitrary code. This issue

    only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS

    and Ubuntu 22.04 LTS. (CVE-2023-39129)

    It was discovered that gdb incorrectly handled memory leading to a

    heap based buffer overflow. An attacker could use this issue to cause a denial of service, or possibly     execute arbitrary code. This issue

    only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-39130)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the gdb package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
212848	CBL Mariner 2.0 Security Update: binutils (CVE-2023-1972)	Nessus	MarinerOS Local Security Checks	2024/12/13	2024/12/13	medium
174644	Fedora 38 : insight (2023-8a6a30c142)	Nessus	Fedora Local Security Checks	2023/4/24	2024/11/14	medium
177689	Amazon Linux 2023 : binutils, binutils-devel, binutils-gprofng (ALAS2023-2023-229)	Nessus	Amazon Linux Local Security Checks	2023/6/28	2024/12/11	medium
174636	Fedora 36 : insight (2023-5d51a42413)	Nessus	Fedora Local Security Checks	2023/4/24	2024/11/14	medium
188834	EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-2748)	Nessus	Huawei Local Security Checks	2024/1/16	2025/9/25	medium
200771	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : gdb vulnerabilities (USN-6842-1)	Nessus	Ubuntu Local Security Checks	2024/6/20	2025/9/3	medium
204059	Photon OS 3.0: Gdb PHSA-2023-3.0-0686	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high

检测

插件搜索

medium

medium

medium

medium

medium

medium

high