The vulnerability of the `aout_get_external_symbols` function in the `aoutx.h` component of the GNU Binutils development environment allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the aoutgetexternalsymbols function in the aoutx.h component of the GNU Binutils development environment is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

The vulnerability of the _bfd_elf_parse_attributes function in the elf-attrs.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdelfparseattributes function in the elf-attrs.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created ELF file...

The vulnerability of the dwarf2.c component in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the dwarf2.c component in the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to trigger a service failure using a specially created ELF file...

The vulnerability of the `read_formatted_entries` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially...

The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

Rocky Linux 8 : binutils (RLSA-2023:6236)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:6236 advisory. - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of...

CLSA-2023-1699380309 Fix CVE(s): CVE-2022-48063

SECURITY UPDATE: fix an attempt to allocate an unreasonably large amount of memory when parsing a corrupt ELF file - debian/patches/CVE-2022-48063.patch: Check for excessively large sections - CVE-2022-48063...

Advisory ROSA-SA-2023-2291

Software: gdb 8.2 OS: ROSA Virtualization 2.1 packageevrstring: gdb-8.2-19.rv3.src.rpm CVE-ID: CVE-2019-1010180 BDU-ID: 2019-03222 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the gdb module of the GDB debugger is related to an operation exceeding buffer boundaries in memory. Exploitation of the...

Fedora 39 : gdb (2023-89ade611ee)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-89ade611ee advisory. Backport upstream commit d28fbc7197b which fixes RHBZ 2233965, Security fix for CVE-2022-48065 ---- Security fix for CVE-2022-48064, Backport upstre...

RHEL 9 : binutils (RHSA-2023:6593)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6593 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

AlmaLinux 8 : binutils (ALSA-2023:6236)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:6236 advisory. - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of...

Oracle Linux 8 : binutils (ELSA-2023-6236)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6236 advisory. - Fix for CVE-2022-4285. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

RHEL 8 : binutils (RHSA-2023:6236)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6236 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

The vulnerability of the `load_separatedebug_files` function in the GNU Binutils development environment, which allows an attacker to trigger a DNS attack

The vulnerability of the loadseparatedebugfiles function in the GNU Binutils development toolset is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to trigger a DNS attack using a specially created ELF file...

The vulnerability of the bfd_dwarf2_find_nearest_line_with_alt function in the GNU Binutils development environment allows a attacker to trigger a DNS attack.

The vulnerability of the bfddwarf2findnearestlinewithalt function in the GNU Binutils development environment is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to trigger a DNS attack using a specially created ELF file...

ROS-20231013-05

Vulnerability of prfunctiontype function in prdbg.c file of GNU Binutils development tool is related to a memory leak. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service A vulnerability in the parsestabstructfields function of the GNU development tool...

GLSA-202309-15 : GNU Binutils: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-15 GNU Binutils: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GNU Binutils. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

Amazon Linux 2023 : binutils, binutils-devel, binutils-gprofng (ALAS2023-2023-334)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-334 advisory. Heap buffer overflow vulnerability in binutils readelf before 2.40 via function displaydebugsection in file readelf.c. CVE-2022-45703 An issue was discovered in Binutils addr2line before 2.39.3...

Oracle Linux 8 : binutils (ELSA-2020-1797)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1797 advisory. 2.30-73.0.1 - Forward-port of Oracle patches from 2.30-68.0.2. - Reviewed-by: Elena Zannoni 2.30-68.0.2 - Backport the non-cycle-detecting-capable...

Oracle Linux 8 : elfutils (ELSA-2019-3575)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3575 advisory. 0.176-5 - Add elfutils-0.176-strip-symbols-illformed.patch 0.176-4 - Add elfutils-0.176-elf-update.patch 1717349 0.176-3 - Rebuilt for annobin change...