7466 matches found
CVE-2022-35205
CVE-2022-35205 concerns GNU Binutils, specifically the readelf tool in version 2.38.50. The issue is a reachable assertion failure in display_debug_names, which can be exploited to cause a denial of service. Multiple connected documents confirm this CVE and describe the affected component as part...
CVE-2022-35206
CVE-2022-35206 is a null pointer dereference in GNU Binutils readelf 2.38.50, triggered via read_and_display_attr_value in dwarf.c. Impact in the connected docs indicates a potential denial of service; exploitation appears to be local. Public remediation details in the connected materials point t...
CVE-2022-47695
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfdmachogetsyntheticsymtab in match-o.c...
CVE-2020-19726
An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service...
CVE-2021-46174
Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...
CVE-2020-35342
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...
CVE-2022-47010
An issue was discovered function prfunctiontype in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...
PT-2023-5193
Name of the Vulnerable Software and Affected Versions Binutils versions prior to 2.39.3 Description The issue is related to the parse module function in GNU Binutils, which is associated with out of bounds reads in memory. This can potentially allow an attacker to cause a denial of service or oth...
GNU Binutils security vulnerabilities
GNU Binutils is a set of open source tools for working with binaries such as target files, executables, libraries, etc., mainly used in the areas of compilation, debugging, reverse engineering and so on. A denial of service vulnerability exists in GNU Binutils. An attacker can exploit this...
CVE-2021-46174: Out-of-bounds Write
Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...
CVE-2022-44840
CVE-2022-44840: A heap/denial-of-service vulnerability in GNU Binutils readelf.c (find_section_in_set) affects readelf up to version before 2.40. A locally authenticated attacker could craft input to trigger a heap-based buffer overflow, potentially causing a crash or denial of service. Public de...
CVE-2022-44840
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...
CVE-2022-47696
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function comparesymbols...
CVE-2022-47007
An issue was discovered function stabdemanglev3arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...
PT-2023-5195
Name of the Vulnerable Software and Affected Versions Binutils versions prior to 2.39.3 Description The issue is related to the compare symbols function in objdump.c and is caused by incorrect clearing or release of resources. This can be exploited by an attacker to cause a denial of service or...
PT-2023-13441
Name of the Vulnerable Software and Affected Versions Binutils readelf version 2.38.50 Description A null pointer dereference issue exists in the readelf component of Binutils, specifically in the function read and display attr value within the file dwarf.c. This issue can be triggered, potential...
CVE-2022-47695
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfdmachogetsyntheticsymtab in match-o.c...
CVE-2022-48063: Uncontrolled Resource Consumption
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...
CVE-2022-48064
CVE-2022-48064 affects GNU Binutils up to version 2.40, where an excessive memory consumption vulnerability in bfd_dwarf2_find_nearest_line_with_alt (dwarf2.c) can be triggered by a crafted ELF file, enabling a remote attacker to cause a DNS attack. IBM/Red Hat/Amazon advisories indicate this req...