7468 matches found
K24353255: Binutils vulnerabilities CVE-2018-18605, CVE-2018-18606, and CVE-2018-18607
Security Advisory Description CVE-2018-18605 A heap-based buffer over-read issue was discovered in the function secmergehashlookup in merge.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31, because bfdaddmergesection mishandles section merges when size i...
K23729200: Multiple GNU Binutils vulnerabilities
Security Advisory Description CVE-2017-9038 GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to the bytegetlittleendian function in elfcomm.c, the getunwindsectionword function in readelf.c, an...
K12541829: Binutils vulnerability CVE-2019-9072
Security Advisory Description An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setupgroup in elf.c. CVE-2019-9072 Impact There is no impact; F5 products are not affected by this...
K42059040: Binutils vulnerability CVE-2019-9075
Security Advisory Description An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c. CVE-2019-9075 Impact Successful exploitation of this vulnerability could...
K62553631: Binutils vulnerabilities CVE-2018-7570, CVE-2018-9996, and CVE-2018-10372
Security Advisory Description CVE-2018-7570 The assignfilepositionsfornonloadsections function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service NULL pointer dereference and application crash vi...
binutils:fuzz_as: Segv on unknown address in expandargv
Detailed Report: https://oss-fuzz.com/testcase?key=5954656347226112 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: expandargv gasearlyinit fuzzas.c Sanitizer: memory...
binutils:fuzz_objdump_safe: Heap-buffer-overflow in evax_bfd_print_eobj
Detailed Report: https://oss-fuzz.com/testcase?key=4736582684114944 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdumpsafe Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x603000008f03 Crash State: evaxbfdprinteobj evaxbfdprintimag...
binutils:fuzz_nm: Crash in ecoff_swap_sym_in
Detailed Report: https://oss-fuzz.com/testcase?key=6458392916131840 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzznm Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00019eed0001 Crash State: ecoffswapsymin bfdecofflocateline...
binutils:fuzz_as: Heap-buffer-overflow in temp_ilp
Detailed Report: https://oss-fuzz.com/testcase?key=4854855199227904 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x604000000080 Crash State: tempilp bufferandnest definemacro...
SUSE CVE-2006-2362
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format...
SUSE CVE-2014-8485
The setupgroup function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted section group headers in an ELF file...
SUSE CVE-2014-8502
Heap-based buffer overflow in the peprintedata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a truncated export table in a PE file...
SUSE CVE-2014-8501
The bfdXXiswapaouthdrin function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable...
SUSE CVE-2014-8503
Stack-based buffer overflow in the ihexscan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted ihex file...
SUSE CVE-2014-8504
Stack-based buffer overflow in the srecscan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted file...
SUSE CVE-2014-8737
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...
SUSE CVE-2014-8738
The bfdslurpextendednametable function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service invalid write, segmentation fault, and crash via a crafted extended name table in an archive...
SUSE CVE-2014-9939
ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects...
SUSE CVE-2017-6966
readelf in GNU Binutils 2.28 has a use-after-free specifically read-after-free error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations...