apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file as demonstrated by readelf.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

apply_relocations in readelf.c of Binutils 2.32 overflows, causing a write fault in byte_put_little_endian.

Reporter	Title	Published	Views	Family All 87
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU binutils affects IBM Netezza Analytics	13 Jan 202116:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics for NPS	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local	20 Dec 201913:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	23 Jul 202009:47	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0120: binutils (ALINUX3-SA-2022:0120)	14 May 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : binutils (EulerOS-SA-2019-2099)	12 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : binutils (EulerOS-SA-2020-1548)	1 May 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-1593)	26 May 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : binutils (EulerOS-SA-2020-1743)	1 Jul 202000:00	–	nessus

Vulners

Node

18 Aug 2020 07:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 3.15.5

EPSS0.00421