Privilege Escalation

binutils is vulnerable to privilege escalation. The vulnerability exists due to an open race window when writing output in ar, objcopy, strip and ranlib...

GNU Binutils 缓冲区错误漏洞

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

The vulnerability of the `finish_stab` function in the `stabs.c` file of the Binutils development tools, related to the operation of pushing values out of the data buffer’s acceptable range, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the finishstab function of the stabs.c file in the Binutils development tools set relates to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, an...

GNU Binutils 后置链接漏洞

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives. An...

GNU Binutils Uninitialized Memory Usage Vulnerability

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. An uninitialized memory usage vulnerability exists in tic4xprintcond in opcodes/tic4x-dis.c in GNU Binutils versions prior to 2.34. An attacker cou...

GNU Binutils 缓冲区错误漏洞

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A heap buffer overflow vulnerability exists in bfdgetlsigned32 in libbfd.c in the Binary File Descriptor BFD library used in GNU Binutils 2.35.1. T...

GNU Binutils Code Problem Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists in setupgroup function which allows a malicious user to cause an application crash...

Arbitrary File Write

binutils is vulnerable to directory traversal. Local users are able to delete arbitrary files via a ../ in the file name or an absolute path name in a malicious archive to strip or perform an objcopy or create arbitrary files...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bounds read in bfdgetl32 of libbfd.c, when called from the pex64getruntimefunction in pei-x8664.c...

Denial Of Service (DoS)

binutils is vulnerable to denial of serviceDoS. The elfparsenotes function in elf.c in the Binary File Descriptor BFD library aka libbfd allows remote attackers to cause a denial of service out-of-bounds read and segmentation violation via a note with a large alignment...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. An attacker to cause excessive memory consumption in the rememberKtype in cplus-dem.c, potentially resulting in an application crash...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. A heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c allows an attacker to execute arbitrary code on the host OS...

GNU Binutils Denial of Service Vulnerability (CNVD-2019-34651)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in findabstractinstance in dwarf2.c in the Binary File Descriptor BFD library used in GNU Binutils 2.32. A...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. An integer overflow in objdump, bfdgetdynamicrelocupperbound and bfdcanonicalizedynamicreloc allows a local attacker to execute arbitrary code...

Denial Of Service (DoS)

Binutils is vulnerable to denial of service DoS attacks. The vulnerability exists in the Binary File Descriptor BFD library. An attacker could cause an application crash via a crafted ELF file impacting availability of the application...

GNU Binutils Excessive Memory Allocation Attempt Vulnerability

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. An excessive memory allocation attempt vulnerability exists in elfreadnotes in elf.c in the Binary File Descriptor BFD library known as libbfd used...

The vulnerability of the `ignore_section_sym` function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the ignoresectionsym function in the GNU Binutils development toolset is related to the lack of NULL check and the assignment of the outputsection pointer when writing a symtab with the type “SECTION”. Exploitation of this vulnerability could allow an attacker to cause servic...

The vulnerability in the cplus-dem.c file of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability in the cplus-dem.c file of the GNU Binutils development environment is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the _bfd_add_merge_section function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the bfdaddmergesection function in the GNU Binutils development environment is related to the assignment of a null pointer when attempting to merge sections with large differences. Exploiting this vulnerability could allow an attacker to trigger a service failure...