PT-2022-8876 · Upx +2 · Upx +2

Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A floating point exception was discovered in the elf lookup function in p lx elf.cpp via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, consider updating to a newer version that contains a fix fo...

PT-2021-4108 · Upx +2 · Upx +2

Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A null pointer dereference was found in the PackLinuxElf::canUnpack function in p lx elf.cpp, which can allow attackers to execute arbitrary code and cause a denial of service via a crafted file. This issue may...

PT-2022-8871 · Upx +2 · Upx +2

Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: An invalid memory address reference was discovered in the elf lookup function in p lx elf.cpp via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, consider updating to a newer version that contains...

EulerOS 2.0 SP3 : binutils (EulerOS-SA-2020-2072)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in...

EulerOS 2.0 SP3 : nasm (EulerOS-SA-2020-2077)

According to the version of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Netwide Assembler NASM 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage thi...

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists in findabstractinstance in dwarf2.c in the Binary File Descriptor BFD library aka libbfd with a crafted ELF file...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists as applyrelocations in readelf.c contains an integer overflow that allows attackers to trigger a write access violation in byteputlittleendian function in elfcomm.c with an ELF file...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exists as the eblobjectnotetypename function in eblobjnotetypename.c allows remote attackers to cause a denial of service with a crafted ELF file...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exists as a heap-based buffer over-read could occur through the handlegnuhash function in readelf.c with an ELF file...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exists as it was possible to trigger a memory allocation failure through the shoff or shsize ELF header value, throough the libelfsetrawdatawrlock function in elfgetdata.c...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A NULL poiinter dereference in elflinkinputbfd in elflink.c, when used for finding STTTLS symbols without any TLS section, allows an attacker to crash the application via a malicious ELF...

Denial Of Service (DoS)

The checksysvhash function in elflint.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

Use-after-free

Bionic is vulnerable to Use-after-free. There is a use-after-free in the error function in elfcomm.c when called from the processarchive function in readelf.c via a crafted ELF file...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denail of service DoS. A flaw in the mergestrings function in merge.c in the Binary File Descriptor BFD library aka libbfd results in a NULL pointer dereference in bfdaddmergesection when attempting to merge sections with large alignments. A specially crafted ELF...

Denial Of Service (DoS)

file is vulnerable to denial of service DoS. The vulnerability exists in the ELF parser...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service. A heap-based buffer over-read issue was discovered in the function secmergehashlookup in merge.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31, because bfdaddmergesection mishandles section merges when...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service. A heap-based buffer over-read in the checkgroup function in elflint.c allow a remote attacker to cause crash the application using a malicious ELF file...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exists as elflint.c does not validate the number of sections and the number of segments, allowing remote attackers to cause a denial of service through a crafted ELF file...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils. There is a stack consumption vulnerability resulting from infinite recursion in the functions dname, dencoding, and dlocalname in cp-demangle.c. Remot...