PT-2017-4296

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 and earlier Description: The issue is related to a memory leak in the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. This allows remote attackers ...

PT-2017-4307

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the find abstract instance name function in the dwarf2.c component of the GNU Binutils. It allows a remote attacker to cause a denial of service by executing an infinite recursion...

PT-2017-4308

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a denial of service,...

PT-2017-4301

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 and earlier Description: The issue is related to a length calculation mishandling in the decode line info function within the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. This...

PT-2017-4300

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in excessive memory allocation and an application crash, via a crafted ELF file. This is due to the bfd elf slurp...

PT-2017-4302

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 and earlier Description: The issue is related to the scan unit for symbols function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a...

Integer Overflow Vulnerability in GNU Binutils

GNU Binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers and other tools for target files and archives. An integer overflow vulnerability exists in the elfx8664getsyntheticsymtab...

PT-2017-4294

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to a buffer overflow in the elf32-i386.c and elf64-x86-64.c components of GNU Binutils. This allows a remote attacker to access confidential data, compromise its integrity, and cause...

PT-2017-4303

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the get synthetic symtab functions in the Binary File Descriptor BFD library, which mishandle the failure of a certain canonicalization step. This allows remote attackers to cause...

CVE-2017-14529

The peprintidata function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PE file...

Heap overflow

The peprintidata function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PE file...

CVE-2017-14529

CVE-2017-14529 affects the Binary File Descriptor (BFD) library (libbfd) used by GNU Binutils 2.29. The vulnerability is in the pe_print_idata function in peXXigen.c, where HintName vector entries are mishandled, enabling a crafted PE file to trigger a heap-based buffer over-read and cause an app...

CVE-2017-14529

The peprintidata function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PE file...

CVE-2017-14529: Out-of-bounds Read

The peprintidata function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PE file...

GLSA-201709-02 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201709-02 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review References for additional information. Impact : A remote attacker, by enticing a user to compile/execute a...

PT-2017-4295

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the interpretation of a -1 value in the get synthetic symtab functions within the Binary File Descriptor BFD library, leading to an integer overflow and potential application cras...

CVE-2017-14529

The peprintidata function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PE file...

GNU Binutils Binary File Descriptor Library Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review References for...

CVE-2017-14333

The processversionsections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service Integer Overflow, and hang because of a time-consuming loop or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vnnext, during "readelf -a...