GNU Binutils Memory Leak Vulnerability in ld Component

A memory leak vulnerability has been identified in GNU Binutils version 2.43. This issue arises in the ld component, specifically within the xmemdup function of xmemdup.c. The vulnerability allows for a remote memory leak, where the application fails to properly manage and release allocated memory, leading to increased memory consumption over time. Although the vulnerability can be exploited remotely, it requires user interaction and is considered to have a high attack complexity.

Impact

Exploitation of this vulnerability leads to a memory leak, causing increased memory usage that is not properly released, which can degrade system performance over time.

Remediation

Users are advised to apply the available patch to address this vulnerability. The patch can be found in the official GNU Binutils repository.