cve/2021/CVE-2021-45078.md

CVE-2021-45078

Description

stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.

POC

Reference

• https://sourceware.org/bugzilla/show_bug.cgi?id=28694

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/fluidattacks/makes
• https://github.com/fokypoky/places-list