What is CVE-2005-4808?

CVE-2005-4808 is a vulnerability in GNU Binutils. Published 2005-12-31.

Is CVE-2005-4808 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in GNU Binutils

CVE-2005-4808

Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.

Published 2005-12-31 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 7.6 (High). Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.023 (82.8th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 83rd percentile — 82.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.023 · newest: 0.023 · change: +0.000

Affected products

GNU Binutils
Canonical Ubuntu Linux — versions 5.10

Public proof-of-concept exploits

phonito/phonito-vulnerable-container

References

sources.redhat.com/bugzilla/show_bug.cgi (Patch, Third Party Advisory, Issue Tracking)
www.ubuntu.com/usn/usn-366-1 (vendor-advisory, Third Party Advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/44661 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2005-4808?: CVE-2005-4808 is a vulnerability in GNU Binutils. Published 2005-12-31.
Is CVE-2005-4808 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.