Astra Linux – Vulnerability in binutils

Heap-based Buffer Overflow in the bfdgetl32 function in Binutils objdump 3.37...

UBUNTU-CVE-2021-46174

Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...

SUSE CVE-2022-38533

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...

CVE-2022-38533

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...

PT-2022-6748

Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.4.0 Description The issue is related to a heap-buffer-overflow in the error function bfd getl32 when called from the strip main function in strip-new via a crafted file. This can lead to a denial of service. Th...

PT-2023-12565

Name of the Vulnerable Software and Affected Versions Binutils objdump version 3.37 Description A heap-based buffer overflow issue exists in the bfd getl32 function. Recommendations For Binutils objdump version 3.37, at the moment, there is no information about a newer version that contains a fix...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c when called from pex64_get_runtime_function in pei-x86_64.c.

...

PT-2019-6400

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to an out-of-bounds read in the Binary File Descriptor BFD library, specifically in the bfd getl32 function within libbfd.c, which is called from pex64 get runtime function in pei-x86...