CVE-2017-9754: Improper Restriction of Operations within the Bounds of a Memory Buffer

The processotr function in bfd/versados.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified...

CVE-2017-9749: Improper Restriction of Operations within the Bounds of a Memory Buffer

The regs macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution...

CVE-2017-9751: Improper Restriction of Operations within the Bounds of a Memory Buffer

opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during...

GNU binutils - ieee_object_p Stack Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21582 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

GNU binutils - 'bfd_get_string' Stack Buffer Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21581 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

GNU binutils - 'decode_pseudodbg_assert_0' Buffer Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21586 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

GNU binutils - 'ieee_object_p' Stack Buffer Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21582 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

GNU binutils - 'print_insn_score16' Buffer Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21576 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

GNU binutils - 'aarch64_ext_ldst_reglist' Buffer Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21595 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

GNU binutils - 'disassemble_bytes' Heap Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21580 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

GNU binutils - 'rx_decode_opcode' Buffer Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21587 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

PT-2017-19160

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the versados mkobject function in the Binary File Descriptor BFD library, which does not initialize a certain data structure. This allows remote attackers to cause a denial of...

PT-2017-19156

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, potentially leading to a buffer overflow and application crash, or possibly having other unspecified impacts. This can be achieved through a...

PT-2017-19158

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to an unbounded GETBYTE macro in the opcodes/rl78-decode.opc file of GNU Binutils. This allows remote attackers to cause a denial of service, resulting in a buffer overflow and...

PT-2017-19159

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This occurs via a crafted binary file, whic...

PT-2017-19152

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This occurs via a crafted binary file, whic...

PT-2017-19161

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the process otr function in the BFD library, which fails to validate a certain offset. This can be exploited by remote attackers using a crafted binary file, potentially leading to ...

PT-2017-19151

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the sh elf set mach from flags function in the BFD library, which can be exploited by remote attackers using a crafted binary file. This can lead to a denial of service, causing a...

PT-2017-19149 · Gnu +1 · Gnu Binutils +1

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.28 Description: The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This can be achieved by using a crafted...

GNU Binutils libbfd Library Denial of Service Vulnerability (CNVD-2017-10176)

GNU Binutils is a set of programming language utility programs developed by the GNU Project. The GNU Binutils libbfd inventory suffers from a denial-of-service vulnerability, which allows remote attackers to exploit the vulnerability by submitting a specially crafted request that crashes the...