CVE-2017-14729

CVE-2017-14729 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils 2.29. The vulnerability is triggered by non-unique PLT entries for a symbol in elf32-i386.c and elf64-x86-64.c, allowing remote attackers to cause a heap-based buffer overflow and application crash via a craf...

CVE-2017-14729

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

PT-2017-4304

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the dwarf1.c component in the Binary File Descriptor BFD library, which mishandles pointers and allows remote attackers to cause a denial of service or possibly have other impacts...

CVE-2017-14729: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have...

PT-2017-4306

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the read formatted entries function in the dwarf2.c component of the Binary File Descriptor BFD library, which does not properly validate the format count. This allows remote...

PT-2017-4297

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a denial of service by...

PT-2017-4305

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the dwarf2.c component in the Binary File Descriptor BFD library, which does not validate the DW AT name data type. This allows remote attackers to cause a denial of service via a...

PT-2017-4264

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.29 Description The issue is related to a buffer over-read in the bfd get debug link info 1 function within the opncls.c component of the Binary File Descriptor BFD library, also known as libbfd. This allows a remote...

PT-2017-4296

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 and earlier Description: The issue is related to a memory leak in the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. This allows remote attackers ...

PT-2017-4307

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the find abstract instance name function in the dwarf2.c component of the GNU Binutils. It allows a remote attacker to cause a denial of service by executing an infinite recursion...

PT-2017-4308

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a denial of service,...

Integer Overflow Vulnerability in GNU Binutils

GNU Binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers and other tools for target files and archives. An integer overflow vulnerability exists in the elfx8664getsyntheticsymtab...

PT-2017-4294

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to a buffer overflow in the elf32-i386.c and elf64-x86-64.c components of GNU Binutils. This allows a remote attacker to access confidential data, compromise its integrity, and cause...

PT-2017-4303

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the get synthetic symtab functions in the Binary File Descriptor BFD library, which mishandle the failure of a certain canonicalization step. This allows remote attackers to cause...

PT-2017-4301

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 and earlier Description: The issue is related to a length calculation mishandling in the decode line info function within the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. This...

PT-2017-4302

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 and earlier Description: The issue is related to the scan unit for symbols function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a...

PT-2017-4300

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in excessive memory allocation and an application crash, via a crafted ELF file. This is due to the bfd elf slurp...

CVE-2017-14529

The peprintidata function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PE file...

Heap overflow

The peprintidata function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PE file...

CVE-2017-14529

CVE-2017-14529 affects the Binary File Descriptor (BFD) library (libbfd) used by GNU Binutils 2.29. The vulnerability is in the pe_print_idata function in peXXigen.c, where HintName vector entries are mishandled, enabling a crafted PE file to trigger a heap-based buffer over-read and cause an app...