CVE-2017-14745

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service integer overflow and application crash or possib...

CVE-2017-14745

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service integer overflow and application crash or possib...

CVE-2017-14745

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service integer overflow and application crash or possib...

CVE-2017-14745: Integer Overflow or Wraparound

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service integer overflow and application crash or possib...

PT-2017-4298

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the read formatted entries function in the dwarf2.c component of GNU Binutils. It involves an infinite loop due to an unreachable exit condition. This can be exploited by a remote...

PT-2017-4309

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to a memory leak caused by the bfd dwarf2 cleanup debug info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. This allows remote...

PT-2017-4310

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to a buffer overflow in the dwarf2.c component of GNU Binutils, allowing a remote attacker to cause a denial of service. This can result in an invalid memory read, segmentation fault...

CVE-2017-14729

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

DEBIAN-CVE-2017-14729

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

Heap overflow

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

CVE-2017-14729

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

CVE-2017-14729

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

CVE-2017-14729

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

CVE-2017-14729

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

CVE-2017-14729

CVE-2017-14729 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils 2.29. The vulnerability is triggered by non-unique PLT entries for a symbol in elf32-i386.c and elf64-x86-64.c, allowing remote attackers to cause a heap-based buffer overflow and application crash via a craf...

PT-2017-4297

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a denial of service by...

PT-2017-4305

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the dwarf2.c component in the Binary File Descriptor BFD library, which does not validate the DW AT name data type. This allows remote attackers to cause a denial of service via a...

PT-2017-4306

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the read formatted entries function in the dwarf2.c component of the Binary File Descriptor BFD library, which does not properly validate the format count. This allows remote...

PT-2017-4304

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the dwarf1.c component in the Binary File Descriptor BFD library, which mishandles pointers and allows remote attackers to cause a denial of service or possibly have other impacts...

CVE-2017-14729: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...