517 matches found
CVE-2022-45703
CVE-2022-45703 is a heap buffer overflow in GNU binutils' readelf tool (readelf.c, display_debug_section) affecting readelf before 2.40. The vulnerability could lead to arbitrary code execution or a crash per the description; the issue is addressed by upgrading to binutils 2.40 or newer. Exploita...
CVE-2022-45703
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function displaydebugsection in file readelf.c...
GNU Binutils 安全漏洞
GNU Binutils is a set of tools for working with binary files. A denial of service vulnerability exists in GNU Binutils, which stems from an issue with the displaydebugnames function in the readelf tool that can cause reachable assertions to fail. An attacker could exploit this vulnerability to...
CVE-2022-45703
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function displaydebugsection in file readelf.c...
CVE-2022-44840
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...
CVE-2022-35205
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function displaydebugnames allows attackers to cause a denial of service...
CVE-2022-45703
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function displaydebugsection in file readelf.c...
CVE-2022-35206
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function readanddisplayattrvalue in file dwarf.c...
OESA-2023-1445 elfutils security update
Elfutils is a collection of utilities, including stack to show backtraces, nm for listing symbols from object files, size for listing the section sizes of an object or archive file, strip for discarding symbols, elflint to check for well-formed ELF files and elfcompress to compress or decompress...
The vulnerability of the `process_mips_specific` function in the `binutils/readelf.c` component of the GNU Binutils development environment allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the processmipsspecific function in the binutils/readelf.c component of the GNU Binutils development environment is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...
DEBIAN-CVE-2021-33294
In elfutils 0.183, an infinite loop was found in the function handlesymtab in readelf.c .Which allows attackers to cause a denial of service infinite loop via crafted file...
UBUNTU-CVE-2021-33294
In elfutils 0.183, an infinite loop was found in the function handlesymtab in readelf.c .Which allows attackers to cause a denial of service infinite loop via crafted file...
SUSE CVE-2014-3710
The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted ELF file...
SUSE CVE-2014-9653
readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service uninitialized memor...
SUSE CVE-2017-6965
readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow...
SUSE CVE-2017-6966
readelf in GNU Binutils 2.28 has a use-after-free specifically read-after-free error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations...
SUSE CVE-2017-6969
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...
SUSE CVE-2017-7209
The dumpsectionasbytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash...
SUSE CVE-2017-9040
GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service NULL pointer dereference and application crash, related to the processmipsspecific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt...