CVE-2006-2362 in the critical feed json
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows co…
published 2006-05-15 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-2363
- cvss
- 7.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 14.5%
- EPSS 14.5% chance of exploitation in 30 days, percentile 96%
- public exploits
- 1
- Exploit-DB
Summary
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.
Patch / fix
- gnu binutils 2.17
- binutils Debian 14, Debian 13, Debian 12 2.17-1
debian advisories DEBIAN-CVE-2006-2362
- securityfocus.com/bid/17950 advisory
Timeline
- First public exploit (EDB-27856)
- Published
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 21 mo ago
Exploit prediction
14.49% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-27856 GNU BinUtils 2.1x - Buffer Overflow dos, 2006-05-11
- securityfocus.com http://www.securityfocus.com/bid/17950 referenced PoC, tagged "exploit" by a source, unverified
- sourceware.org http://sourceware.org/bugzilla/show_bug.cgi?id=2584 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| CNA | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-787 Out-of-bounds Write
References
-
securityfocus.com
/bid/17950
vdb-entry, exploit, patch, third-party-advisory
-
sourceware.org
/bugzilla/show_bug.cgi?id=2584
exploit, issue-tracking, third-party-advisory
-
trustix.org
/errata/2006/0034/
vendor-advisory, broken-link
-
novell.com
/linux/security/advisories/2006_26_sr.html
vendor-advisory, third-party-advisory
-
ubuntu.com
/usn/usn-292-1
vendor-advisory, broken-link
-
lists.apple.com
/archives/security-announce/2007/Oct/msg00001.html
vendor-advisory, mailing-list, third-party-advisory
-
secunia.com
/advisories/20188
third-party-advisory
-
secunia.com
/advisories/20550
third-party-advisory
-
secunia.com
/advisories/22932
third-party-advisory
-
secunia.com
/advisories/27441
third-party-advisory
-
mail-archive.com
/bug-binutils%40gnu.org/msg01516.html
mailing-list, issue-tracking
-
vupen.com
/english/advisories/2007/3665
vdb-entry, permissions-required
-
vupen.com
/english/advisories/2006/1924
vdb-entry, permissions-required
-
securitytracker.com
/id?1018872
vdb-entry, third-party-advisory
-
secunia.com
/advisories/20531
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/26644
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2006-2362
- NVD CVE-2006-2362
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.