Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\0' character.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType 
mscve
 mscve🔗 msrc.microsoft.com👁 5 Views

Heap buffer over-read in the Binary File Descriptor library due to elf_object_p misparsing a group section in elfcode.h.

Related
Detection
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics for NPS
31 May 202203:16
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics
13 Jan 202115:48
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local
20 Dec 201913:52
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.
23 Jul 202009:47
–ibm
astralinux
AstraLinux		Astra Linux – Vulnerability in binutils
20 May 202605:53
–astralinux
bdu_fstec
BDU FSTEC		The vulnerability of the elf_object_p function in the bfd/elfcode.h component of the GNU Binutils development environment allows a attacker to cause a service failure.
14 Nov 202300:00
–bdu_fstec
cbl_mariner
CBLMariner		CVE-2019-12972 affecting package binutils 2.32-5
30 Nov 202019:30
–cbl_mariner
cloudfoundry
Cloud Foundry		USN-4336-1: GNU binutils vulnerabilities | Cloud Foundry
14 May 202000:00
–cloudfoundry
cloudlinux
CloudLinux		Fix of CVE: CVE-2018-18605, CVE-2019-12972, CVE-2016-4490, CVE-2018-6543, CVE-2018-19931, CVE-2018-10535, CVE-2019-17450, CVE-2018-7643, CVE-2016-4487, CVE-2016-4492, CVE-2018-20002, CVE-2018-1000876, CVE-2019-9073, CVE-2019-9075, CVE-2018-20671, CVE-2016-4488, CVE-2018-7568, CVE-2018-7642, CVE-2018-10373, CVE-2018-6323, CVE-2016-2226, CVE-2016-4493, CVE-2018-19932, CVE-2018-6759, CVE-2019-9077, CVE-2018-18607, CVE-2018-8945, CVE-2018-7208, CVE-2016-6131, CVE-2018-13033, CVE-2018-20623, CVE-2019-14444, CVE-2018-18309, CVE-2018-18606, CVE-2018-7569, CVE-2016-4489
16 Dec 202116:02
–cloudlinux
cloudlinux
CloudLinux		Fix of 36 CVEs
27 Dec 202116:08
–cloudlinux
Rows per page
Vulners
Node
microsoftcm1_binutils_2.32-4Range<2.32-4

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
18 Aug 2020 07:00Current
7.4High risk
Vulners AI Score7.4
CVSS 24.3
CVSS 3.15.5
EPSS0.01802
binary file descriptorbuffer overreadelf_object_p errorgroup section issueelfcode.h
5