GNU Binutils Return Value Vulnerability in prdbg.c tg_tag_type Function

A return value vulnerability has been identified in GNU Binutils version 2.45. The issue arises in the function tg_tag_type within the file prdbg.c. This vulnerability allows for manipulation that leads to an unchecked return value, potentially causing a denial-of-service condition. The vulnerability requires local access to exploit.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash or become unresponsive.

Reproduction

The vulnerability can be reproduced by compiling GNU Binutils 2.45 with debugging information enabled. After compiling, the 'objdump' command can be used to disassemble a file with specific options that trigger the vulnerability. The 'tg_tag_type' function will then abort the process, causing a crash.