binutils:fuzz_nm: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5047985349984256 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzznm Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000000295 Crash State: bfdgetl16 bfdmipselfrelocunshuffle...

Ubuntu: Security Advisory (USN-6413-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6413-1: GNU binutils vulnerabilities

It was discovered that GNU binutils was not properly performing checks when dealing with memory allocation operations, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2017-1712...

Ubuntu 16.04 ESM / 18.04 ESM : GNU binutils vulnerabilities (USN-6413-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6413-1 advisory. It was discovered that GNU binutils was not properly performing checks when dealing with memory allocation operations, which could lead to...

CVE-2023-2222

Rejected reason: This was deemed not a security vulnerability by upstream...

GLSA-202309-15 : GNU Binutils: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-15 GNU Binutils: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GNU Binutils. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

GNU Binutils: Multiple Vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in GNU Binutils. Please review the CVE identifie...

Fedora 38 : gdb (2023-d94be55511)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d94be55511 advisory. Security fix for CVE-2022-48064 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

SUSE SLED15: binutils / binutils-devel / binutils-devel-32bit / binutils-gold / etc (SUSE-SU-2023:3825-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3825-1 advisory. Update to version 2.41 jscPED-5778: The MIPS port now supports the Sony Interactive Entertainmen...

SUSE: Security Advisory (SUSE-SU-2023:3825-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5549487273410560 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61a0000005b1 Crash State: bfdgetl16 elf32armgetsyntheticsymtab...

SUSE-SU-2023:3837-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR MFSA 2023-42, bsc1215575: Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 bmo1846683. - CVE-2023-5169: Out-of-bounds write in PathOps bmo1846685. - CVE-2023-517...

SUSE-SU-2023:3825-1 Security update for binutils

This update for binutils fixes the following issues: Update to version 2.41 jscPED-5778: The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few...

SUSE-SU-2023:3800-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. bsc1198712 - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. bsc1193880 - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue...

CLSA-2023-1695752345 Fix CVE(s): CVE-2022-45703

SECURITY UPDATE: a heap buffer overflow triggered in displaydebugsection at binutils/readelf.c - debian/patches/CVE-2022-45703.patch: combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-45703...

CLSA-2023-1695752243 Fix CVE(s): CVE-2022-45703

SECURITY UPDATE: a heap buffer overflow triggered in displaydebugsection at binutils/readelf.c - debian/patches/CVE-2022-45703.patch: combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-45703...

Moderate Photon OS Security Update - PHSA-2023-3.0-0655

Updates of 'libpng', 'binutils' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0478

Updates of 'libwebp', 'binutils' packages of Photon OS have been released...

binutils:fuzz_objcopy: Invalid-free in bfd_init_section_compress_status

Detailed Report: https://oss-fuzz.com/testcase?key=5120689432297472 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjcopy Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Invalid-free Crash Address: 0x621000004690 Crash State: bfdinitsectioncompressstatus...

SUSE SLES12 Security Update : binutils (SUSE-SU-2023:3695-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3695-1 advisory. Update to version 2.41 jscPED-5778: The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the...