CVE-2017-7226

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

GNU Binutils 'pe_ILF_object_p' Function Buffer Overflow Vulnerability

GNU Binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers and other tools for target files and archives. A stack buffer overflow vulnerability exists in the 'peILFobjectp' function in...

CVE-2017-7226

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

CVE-2017-7226

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

Heap overflow

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

CVE-2017-7226

CVE-2017-7226 concerns the Binary File Descriptor (BFD) library (GNU Binutils) as distributed in Binutils 2.28. The vulnerability arises in the pe_ILF_object_p function, where a heap-based buffer over-read of size 4049 can occur because strlen is used instead of strnlen. This can cause program cr...

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

CVE-2017-3867

CVE-2017-3867 affects Cisco Adaptive Security Appliance (ASA) Software. The vulnerability lies in the BGP/BFD implementation, where unauthenticated remote attackers could bypass ACLs for specific TCP/UDP traffic by sending packets with targeted destination ports. Impact described in the records i...

Cisco Adaptive Security Appliance BGP Bidirectional Forwarding Detection ACL Bypass Vulnerability

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. The vulnerability occu...

Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers...

Cisco IOS XR GSR 12000 Port Range BFD DoS (cisco-sa-20160311-gsr)

The remote Cisco IOS XR device is a Gigabit Switch Router GSR 12000 Series router model and is a version that is missing a vendor-supplied security patch. It is, therefore, affected by a denial of service vulnerability in the ASIC UDP ingress receive function due to improper validation for the...

CVE-2016-1361

Cisco IOS XR through 4.3.2 on Gigabit Switch Router GSR 12000 devices does not properly check for a Bidirectional Forwarding Detection BFD header in a UDP packet, which allows remote attackers to cause a denial of service line-card restart via a crafted packet, aka Bug ID CSCuw56900...

Code injection

Cisco IOS XR through 4.3.2 on Gigabit Switch Router GSR 12000 devices does not properly check for a Bidirectional Forwarding Detection BFD header in a UDP packet, which allows remote attackers to cause a denial of service line-card restart via a crafted packet, aka Bug ID CSCuw56900...

CVE-2016-1361

CVE-2016-1361 affects Cisco IOS XR on GSR 12000 devices (through 4.3.2): the UDP ingress path does not properly validate a BFD header in UDP packets, allowing an unauthenticated remote attacker to cause a line-card restart and DoS. Evidence across multiple sources (Cisco advisory and CVE records)...

Cisco Gigabit Switch Router 12000 Series Routers Denial of Service Vulnerability

A vulnerability in the ASIC UDP ingress receive function of Cisco Gigabit Switch Router GSR 12000 Series Routers could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition when one line card in the router unexpectedly restarts. The vulnerability is due to...

Juniper Networks Junos OS FTPS-Extensions Vulnerability

Junos OS is prone to a vulnerability in BFD daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if descriptio...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially crafted uBFD packet...

Juniper Junos bfdd RCE (JSA10690)

According to its self-reported version number, the remote Juniper Junos device is affected by a remote code execution vulnerability in the BFD daemon bfdd. A remote attacker, using a specially crafted BFD packet, can exploit this to cause a denial of service or execute arbitrary code. Note that...

CVE-2015-5362

The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before...

Code injection

The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before...