USN-6544-1: GNU binutils vulnerabilities

It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. CVE-2022-38533 It was discovered that GNU binutils was not properly performing bounds checks...

Ubuntu 20.04 LTS / 22.04 LTS : GNU binutils vulnerabilities (USN-6544-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6544-1 advisory. It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or...

GNU Binutils Excessive Memory Consumption Vulnerability

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. GNU Binutils suffers from an excessive memory consumption vulnerability, which...

Amazon Linux 2 : binutils (ALAS-2023-2373)

The version of binutils installed on the remote host is prior to 2.29.1-31. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2373 advisory. An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in...

Low: binutils

Issue Overview: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c. CVE-2021-32256 Affected Packages: binutils Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ sectio...

gcc-toolset-11-binutils bug fix and enhancement update

An update is available for gcc-toolset-11-binutils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The binutils packages provide a collection of binary utilitie...

binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...

Moderate: Red Hat Security Advisory: binutils security update

An update for binutils is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 8 : binutils (RHSA-2023:7394)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7394 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

Oracle Linux 9 : binutils (ELSA-2023-6593)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6593 advisory. 2.35.2-42.0.1 - Forward-port Oracle patches to 2.35.2-42. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

GNU Binutils peicode.h Heap Buffer Overflow DoS

The vulnerability of the pebfdreadbuildid function in the peicode.h component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...

GNU Binutils coff_slurp_line_table Buffer Overflow DoS

The vulnerability of the coffslurplinetable function in the coffcode.h component of the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

GNU Binutils Alpha Buffer Overflow DoS

The vulnerability of the alphavmsobjectp function in the bfd/vms-alpha.c component of the GNU Binutils development environment is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

GNU Binutils read_symbol_stabsdebugging_info Buffer Overflow DoS

The vulnerability of the readsymbolstabsdebugginginfo function in the rddbg.c component of the GNU Binutils development environment is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

bfd mach-o read symtab strtab DoS

The vulnerability of the bfdmachoreadsymtabstrtab function in the bfd/mach-o.c component of the GNU Binutils development environment is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

GNU Binutils Development Environment DoS

The vulnerability of the setupgroup function in the elf.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the cplus-dem.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

GNU Binutils process_version_sections Heap Buffer Overflow DoS

The vulnerability of the processversionsections function in the readelf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to cause service failures or other effects through a specially created binary file...

GNU Binutils Development Environment Confidential Data Access DoS

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

GNU Binutils Dwarf2 C Buffer Overflow DoS

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF...