CVE-2023-25586 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
Problem types: cwe_id: CWE-457
description: Use of Uninitialized Variable
Affected products: vendor: n/a
product: binutils
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Fedora
product: Fedora 36
default_status: unaffected
vendor: Fedora
product: Fedora 36
default_status: unaffected
vendor: Fedora
product: Fedora 36
default_status: unaffected
vendor: Fedora
product: Fedora 37
default_status: unaffected
vendor: Fedora
product: Extra Packages for Enterprise Linux 7
default_status: unaffected
vendor: Fedora
product: Fedora
default_status: unaffected
vendor: Fedora
product: Fedora 37
default_status: unaffected
vendor: Fedora
product: Fedora 37
default_status: unaffected
vendor: Fedora
product: Fedora 37
default_status: unaffected
vendor: Fedora
product: Fedora 36
default_status: unaffected
vendor: Fedora
product: Fedora 36
default_status: unaffected
vendor: Fedora
product: Extra Packages for Enterprise Linux 8
default_status: unaffected
vendor: Fedora
product: Extra Packages for Enterprise Linux 8
default_status: unaffected
vendor: Fedora
product: Fedora 36
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
Published: 2023-09-14T20:49:15.468Z