binutils:fuzz_dwarf: Heap-buffer-overflow in coff_bigobj_swap_aux_in

Detailed Report: https://oss-fuzz.com/testcase?key=5559160971067392 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdwarf Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6160000005b0 Crash State: coffbigobjswapauxin...

Moderate Photon OS Security Update - PHSA-2023-5.0-0080

Updates of 'binutils' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-91-0080

Updates of 'binutils' packages of Photon OS have been released...

Denial Of Service (DoS)

binutils is vulnerable to Denial Of Service DoS. The vulnerability exists in the bfdmachogetsyntheticsymtab function of match-o.c, which allows an attacker to cause an aplication crash by providing a maliciously crafted input...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in parsestabstructfields within stabs.c which allows a malicious attacker to cause a denial of service locally...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in prfunctiontype within prdbg.c, which allows a malicious attacker to cause a denial of service locally...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in maketempdir and maketempname within bucomm.c, which allows a malicious attacker to cause a denial of service locally...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in stabdemanglev3arg within stabs.c which allows a malicious attacker to cause a denial of service locally...

Reachable Assertion

binutils is vulnerable to Reachable Assertion. The vulnerability occurs due to a reachable assertion failure within the displaydebugnames function resulting in a malicious attacker to cause a denial of service...

GNU Binutils Memory Leak Vulnerability

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. A memory leak vulnerability exists in GNU Binutils, which originates from a...

CVE-2022-47696

A NULL pointer vulnerability was found in binutils in the 'comparesymbols' function. This flaw allows an attacker to craft a specific payload, possibly causing a denial of service that results in a loss of the system's availability...

CVE-2022-47695

An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfdmachogetsyntheticsymtab in match-o.c...

CVE-2022-47673

An issue was discovered in Binutils addr2line before 2.39.3, function parsemodule contains multiple out of bound reads which may cause a denial of service or other unspecified impacts...

CVE-2022-45703

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function displaydebugsection in file readelf.c...

CVE-2022-44840

A heap-based buffer overflow vulnerability was found in binutils in the findsectioninset function. This flaw allows an attacker to use a specially crafted payload to trigger a buffer overflow, resulting in issues with availability, confidentiality, and integrity...

CVE-2021-46174

Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...

CVE-2020-35342

GNU Binutils has an uninitialized-heap vulnerability in function tic4xprintcond in opcodes/tic4x-dis.c file which could allow attackers to make an information leak...

CVE-2022-47011

A memory leak flaw was found in binutils. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability...

CVE-2022-47010

A memory leak flaw was found in binutils in the prfunctiontype function. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability...

CVE-2022-47008

A memory leak was found in binutils in the maketempdir and maketempname functions. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability...