Medium: binutils

Issue Overview: A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmarkrsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an...

Medium: binutils

Issue Overview: A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmarkrsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an...

CBL Mariner 2.0 Security Update: crash (CVE-2023-25588)

The version of crash installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25588 advisory. - A flaw was found in Binutils. The field thebfd of asymbolstruct is uninitialized in the...

Azure Linux 3.0 Security Update: crash (CVE-2023-25588)

The version of crash installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25588 advisory. - A flaw was found in Binutils. The field thebfd of asymbolstruct is uninitialized in the...

CBL Mariner 2.0 Security Update: crash / gdb (CVE-2022-47696)

The version of crash / gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47696 advisory. - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or...

CBL Mariner 2.0 Security Update: crash (CVE-2023-25585)

The version of crash installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25585 advisory. - A flaw was found in Binutils. The use of an uninitialized field in the struct module module May lead to...

Azure Linux 3.0 Security Update: crash / gdb (CVE-2022-47696)

The version of crash / gdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47696 advisory. - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or...

Azure Linux 3.0 Security Update: crash (CVE-2023-25584)

The version of crash installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25584 advisory. - An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils. CVE-2023-255...

CBL Mariner 2.0 Security Update: crash (CVE-2023-25584)

The version of crash installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25584 advisory. - An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils. CVE-2023-255...

Out of bounds read in parse_module function in bfd/vms-alpha.c

...

An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols.

...

An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts.

...

GNU Binutils objdump Memory Leak Vulnerability

GNU Binutils is a toolset for creating, assembling and linking programs. A memory leak vulnerability exists in GNU Binutils. The vulnerability stems from improper memory management in the displayinfo function in the bucomm.c file. No details of the vulnerability are provided at this time...

binutils:fuzz_windres: Use-of-uninitialized-value in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5758429706911744 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzwindres Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdgetl16 readcoffresdir readcoffrsrc...

binutils:fuzz_windres: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5532597977677824 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzwindres Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52100000d8e0 Crash State: bfdgetl32 bintores readcoffdataentry...

Advisory ROSA-SA-2025-2833

Software: binutils 2.30 OS: ROSA Virtualization 2.1 packageevrstring: binutils-2.30-125.0.1.rv3 CVE-ID: CVE-2018-12699 BDU-ID: 2021-01389 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the finishstab function of the stabs.c file of the Binutils program development kit is related to an operation...

Advisory ROSA-SA-2025-2815

Software: binutils 2.30 OS: ROSA Virtualization 3.0 packageevrstring: binutils-2.30-125.rv30 CVE-ID: CVE-2018-12699 BDU-ID: 2021-01389 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the finishstab function of the stabs.c file of the Binutils program development kit is related to an operation...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-1348)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2025-1347)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the fil...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2025-1348)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the fil...