CVE-2017-16831: Integer Overflow or Wraparound

coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service integer overflow and application crash, or excessive memory allocation or possibly have unspecified...

CVE-2017-16829: Out-of-bounds Read

The bfdelfparsegnuproperties function in elf-properties.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service out-of-bounds read and application crash or possibl...

CVE-2017-16827: Improper Restriction of Operations within the Bounds of a Memory Buffer

The aoutgetexternalsymbols function in aoutx.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service slurpsymtab invalid free and application crash or possibly have unspecified other impact via a crafted E...

PT-2017-4249

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.29.1 Description The issue is related to the bfd elf parse gnu properties function in the Binary File Descriptor BFD library, which does not prevent negative pointers. This allows remote attackers to cause a denial of...

CVE-2017-16826: Improper Restriction of Operations within the Bounds of a Memory Buffer

The coffslurplinetable function in coffcode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted PE fi...

CVE-2017-16828: Integer Overflow or Wraparound

The displaydebugframes function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service integer overflow and heap-based buffer over-read, and application crash or possibly have unspecified other impact via a crafted ELF file, related to printdebugframe...

CVE-2017-16830: Integer Overflow or Wraparound

The printgnupropertynote function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via a crafted ELF...

PT-2017-4323

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29.1 Description: The issue is related to a buffer over-read in the nm.c and objdump.c components of GNU Binutils, which can be exploited by a remote attacker using a specially crafted ELF file. This exploitation can le...

PT-2017-4318

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29.1 Description: The issue is related to the elf.c component in the Binary File Descriptor BFD library, which does not validate sizes of core notes. This allows remote attackers to cause a denial of service via a craft...

CVE-2017-15939

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles NULL files in a .debugline file table, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ELF file, related to...

GNU Binutils Binary File Descriptor Library Buffer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

GNU Binutils Binary File Descriptor Library Incompletely Fixes Remote Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

EulerOS 2.0 SP1 : binutils (EulerOS-SA-2017-1278)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The processversionsections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service Integer Overflow, and hang...

PT-2017-4316

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29.1 Description: The issue is related to the coffgen.c component in the Binary File Descriptor BFD library, which does not validate the symbol count. This allows remote attackers to cause a denial of service, potential...

PT-2017-4314

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29.1 Description: The issue is related to an integer overflow in the display debug frames function of the dwarf.c component in GNU Binutils. This allows a remote attacker to potentially access sensitive data, compromise...

PT-2017-4315

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29.1 Description: The issue is related to integer-overflow protection in the print gnu property note function. This allows remote attackers to cause a denial of service, potentially leading to a segmentation violation a...

EulerOS 2.0 SP2 : binutils (EulerOS-SA-2017-1279)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The processversionsections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service Integer Overflow, and hang...

PT-2017-4317

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29.1 Description: The issue is related to the pe bfd read buildid function in the peicode.h component of the Binary File Descriptor BFD library. It does not validate size and offset values in the data dictionary, allowi...

PT-2017-4312

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29.1 Description: The issue is related to a buffer overflow in the coff slurp line table function of the coffcode.h component in GNU Binutils. This allows a remote attacker to access confidential data, compromise its...

GNU Binutils elfcomm.c Denial of Service Vulnerability

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in elfcomm.c in readelf in GNU Binutils 2.29. Via a specially crafted ELF file, a remote attacker can...