Fedora: Security Advisory for mingw-binutils (FEDORA-2023-15c6e4be28)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: mingw-binutils-2.39-6.fc38

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

binutils:fuzz_addr2line: Heap-buffer-overflow in process_file

Detailed Report: https://oss-fuzz.com/testcase?key=6087829095841792 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60c0000003b3 Crash State: processfile fuzzaddr2line....

binutils:fuzz_objdump_safe: Heap-use-after-free in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=6136413774282752 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdumpsafe Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61f000000080 Crash State: bfdgetl32 mipsrefloreloc...

PT-2023-17381

Name of the Vulnerable Software and Affected Versions Binutils affected versions not specified Description A potential heap-based buffer overflow was found in the bfd elf slurp version tables function in bfd/elf.c. This issue may lead to a loss of availability. Recommendations At the moment, ther...

GNU Binutils disassemble_data Heap Buffer Overflow DoS

The vulnerability of the disassembledata function in the objdump.c component of the GNU Binutils development environment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause...

CVE-2023-22608

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2023-1579

A heap based buffer overflow was found in binutils-gdb/bfd/libbfd.c in bfdgetl64 in binutils...

SUSE CVE-2023-1579

Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...

binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite

Detailed Report: https://oss-fuzz.com/testcase?key=4829974279618560 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdbwrite coffwritesymbol...

Low: binutils

Issue Overview: In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file. CVE-2022-38533 Affected Packages: binutils Issue Correction: Run dnf update binutils --releasever 2023.0.20230322 o...

Amazon Linux 2023 : binutils, binutils-devel, binutils-gprofng (ALAS2023-2023-119)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-119 advisory. In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file. CVE-2022-38533 Tenable has extracted...

Fedora: Security Advisory for mingw-binutils (FEDORA-2023-d044484038)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: mingw-binutils-2.38-7.fc37

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

[SECURITY] Fedora 36 Update: mingw-binutils-2.37-7.fc36

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

Fedora 36 : mingw-binutils (2023-d044484038)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d044484038 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 37 : mingw-binutils (2023-a86258ed64)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a86258ed64 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

binutils:fuzz_disassemble: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=4651718416924672 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzdisassemble Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000013ee Crash State: printinsn fuzzdisassemble.c...

binutils:fuzz_objdump: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5497774612545536 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzobjdump Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f5b1d8a51b8 Crash State: printinsn disassemblesection...

binutils:fuzz_disas_ext-bfd_arch_i386: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5452642448179200 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001011 Crash State: printinsn...