UBUNTU-CVE-2017-14933

readformattedentries in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite loop via a crafted ELF file...

CVE-2017-14938: Allocation of Resources Without Limits or Throttling

bfdelfslurpversiontables in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted ELF file...

CVE-2017-14939: Out-of-bounds Read

decodelineinfo in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-30068)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. The binary file descriptor BFD library used in GNU Binutils fails to handle length calculations correctly with decodelineinfo in dwarf2.c. A remote...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-30067)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in scanunitforsymbols in dwarf2.c in the Binary File Descriptor BFD library used in GNU Binutils, which ca...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-30075)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in processdebuginfo in dwarf.c in the Binary File Descriptor BFD library used in GNU Binutils, which can b...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-30073)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in decodelineinfo in dwarf2.c in the Binary File Descriptor BFD library used in GNU Binutils, which can be...

CVE-2017-14930: Missing Release of Resource after Effective Lifetime

Memory leak in decodelineinfo in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service memory consumption via a crafted ELF file...

CVE-2017-14940: NULL Pointer Dereference

scanunitforsymbols in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ELF file...

CVE-2017-14933: Loop with Unreachable Exit Condition

readformattedentries in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite loop via a crafted ELF file...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-30074)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in readformattedentries in dwarf2.c in the Binary File Descriptor BFD library used in GNU Binutils, which...

CVE-2017-14932: Loop with Unreachable Exit Condition

decodelineinfo in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite loop via a crafted ELF file...

CVE-2017-14934: Incorrect Calculation of Buffer Size

processdebuginfo in dwarf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite loop via a crafted ELF file that contains a negative size value in a CU structure...

CVE-2017-14939

decodelineinfo in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to...

CVE-2017-14938

bfdelfslurpversiontables in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted ELF file...

CVE-2017-14939

decodelineinfo in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to...

CVE-2017-14938

CVE-2017-14938 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils 2.29. The flaw is in _bfd_elf_slurp_version_tables() within elf.c and allows an attacker to trigger a denial of service by feeding a crafted ELF file, causing excessive memory allocation and an application cr...

CVE-2017-14938

bfdelfslurpversiontables in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted ELF file...

CVE-2017-14940

CVE-2017-14940 affects GNU Binutils libbfd: the scan_unit_for_symbols function in dwarf2.c can dereference a NULL pointer when processing a crafted ELF file, enabling a remote attacker to cause a denial of service (application crash). The vulnerability is tied to Binutils 2.29; exploitation detai...

CVE-2017-14940

scanunitforsymbols in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ELF file...