mingw-w64-binutils: multiple issues

🗓️ 19 Nov 2014 00:00:00Reported by Arch LinuxType

archlinux

archlinux🔗 lists.archlinux.org👁 43 Views

mingw-w64-binutils: multiple security issues including invalid read, out-of-bounds write, heap overflow, and directory traversa

Reporter	Title	Published	Views	Family All 213
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Gnu binutils affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in binutils affects IBM Flex System Manager (FSM): (CVE-2014-8501, CVE-2014-8502, CVE-2014-8503)	31 Jan 201901:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in binutils affect IBM Chassis Management Module (CMM) (CVE-2014-8501 CVE-2014-8502 CVE-2014-8503)	31 Jan 201902:10	–	ibm
Amazon	Medium: binutils	14 Dec 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : binutils (ALAS-2015-620)	15 Dec 201500:00	–	nessus
Tenable Nessus	CentOS 7 : binutils (CESA-2015:2079)	2 Dec 201500:00	–	nessus
Tenable Nessus	Debian DLA-184-1 : binutils security update	30 Mar 201500:00	–	nessus
Tenable Nessus	Debian DSA-3123-1 : binutils - security update	12 Jan 201500:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : binutils (EulerOS-SA-2019-1431)	14 May 201900:00	–	nessus
Tenable Nessus	Fedora 20 : arm-none-eabi-binutils-cs-2014.05.28-3.fc20 (2014-14833)	6 Dec 201400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
any	any	any	mingw-w64-binutils	2.24-2	UNKNOWN

Source	Link
seclists	www.seclists.org/oss-sec/2014/q4/599
access	www.access.redhat.com/security/cve/CVE-2014-8737
seclists	www.seclists.org/oss-sec/2014/q4/424
access	www.access.redhat.com/security/cve/CVE-2014-8503
access	www.access.redhat.com/security/cve/CVE-2014-8485
access	www.access.redhat.com/security/cve/CVE-2014-8484
access	www.access.redhat.com/security/cve/CVE-2014-8501
access	www.access.redhat.com/security/cve/CVE-2014-8504
access	www.access.redhat.com/security/cve/CVE-2014-8502
access	www.access.redhat.com/security/cve/CVE-2014-8738

19 Nov 2014 00:00Current

4.6Medium risk

Vulners AI Score4.6

EPSS0.07857

mingw-w64-binutils security issues invalid read out-of-bounds write heap overflow directory traversal denial of service code execution libbfd pe executable objdump ihex files srec parser ar archive