CVE-2017-7226

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

CVE-2017-7227

GNU linker ld in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-04322)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. Binutils suffers from a denial of...

CVE-2017-7226: Out-of-bounds Read

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

CVE-2017-7223: Improper Restriction of Operations within the Bounds of a Memory Buffer

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

CVE-2017-7225: NULL Pointer Dereference

The findnearestline function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash...

CVE-2017-7227: Improper Restriction of Operations within the Bounds of a Memory Buffer

GNU linker ld in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l...

PT-2017-17590

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue arises from the pe ILF object p function in the Binary File Descriptor library, which is part of GNU Binutils. This function is vulnerable to a heap-based buffer over-read due to its use of the...

PT-2017-17588

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue arises from the find nearest line function in objdump, which is part of GNU Binutils. It is vulnerable to an invalid write when disassembling a corrupt binary containing an empty function name...

PT-2017-17589

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue arises from the find nearest line function in addr2line when it fails to handle the case where both the main file name and the directory name are empty. This failure leads to a NULL pointer...

PT-2017-17591

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to a heap-based buffer overflow in the GNU linker ld when processing a malformed input script. This occurs due to the lack of '0' termination of a name field in ldlex.l, leading to a...

PT-2017-17587

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The GNU assembler in GNU Binutils is susceptible to a global buffer overflow of size 1 when trying to unget an EOF character from the input stream. This could potentially cause a program crash...

CVE-2017-7224: Out-of-bounds Write

The findnearestline function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write of size 1 while disassembling a corrupt binary that contains an empty function name, leading to a program crash...

Heap overflow

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

Stack overflow

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects...

CVE-2014-9939

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects...

CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

CVE-2014-9939

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects...

Null pointer dereference

The dumpsectionasbytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash...