Mageia: Security Advisory (MGASA-2020-0112)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

binutils:fuzz_objdump: Heap-buffer-overflow in evax_bfd_print_dst

Detailed Report: https://oss-fuzz.com/testcase?key=6551914504912896 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000b5 Crash State: evaxbfdprintdst evaxbfdprintimage...

PT-2023-12565

Name of the Vulnerable Software and Affected Versions Binutils objdump version 3.37 Description A heap-based buffer overflow issue exists in the bfd getl32 function. Recommendations For Binutils objdump version 3.37, at the moment, there is no information about a newer version that contains a fix...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-2903)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5899522704801792 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000000154 Crash State: bfdgetl32 bfdmipselfsectionfromshdr...

Oracle Linux 8 : binutils (ELSA-2021-4364)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4364 advisory. 2.30-108.0.2 - Forward-port the following update: 2.30-93.0.4 - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps - Backport test...

OSV-2021-1575 Heap-buffer-overflow in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40967 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetl16 parsemodule bfdvmsfindnearestline...

PT-2021-30970

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40967 Crash type: Heap-buffer-overflow READ 1 Crash state: bfd getl16 parse module bfd vms find nearest line...

PT-2021-30968

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40908 Crash type: Heap-buffer-overflow READ 1 Crash state: bfd getl32 bfd mips elf section from shdr bfd section from shdr...

PT-2021-30969

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40919 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bfd putl32 bpf elf generic reloc bfd perform relocation...

binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

There's a flaw in the BFD library of binutils. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption...

PT-2021-30966

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfd getl16 bfd mips elf reloc unshuffle bfd mips elf32 gprel16 reloc...

binutils:fuzz_addr2line: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5075151692103680 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffee37c1a00 Crash State: errorhandlerinternal...

openSUSE 15 Security Update : binutils (openSUSE-SU-2021:3616-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3616-1 advisory. Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm Management Extension RME fo...

SUSE SLED15: binutils / binutils-devel / binutils-devel-32bit / binutils-gold / etc (SUSE-SU-2021:3616-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3616-1 advisory. Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm...

NewStart CGSL MAIN 6.02 : binutils Multiple Vulnerabilities (NS-SA-2021-0122)

The remote NewStart CGSL host, running version MAIN 6.02, has binutils packages installed that are affected by multiple vulnerabilities: - findabstractinstance in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32, allows remote attackers to cause a...

Ubuntu 18.04 LTS / 20.04 LTS : GNU binutils vulnerabilities (USN-5124-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5124-1 advisory. It was discovered that GNU binutils incorrectly handled certain hash lookups. An attacker could use this issue to cause GNU binutils to crash...

Arista Networks Arista EOS has an unspecified vulnerability

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, U.S. A security vulnerability exists in Arista Networks Arista EOS and clouddeos, which could be exploited by an attacker to obtain passwords for use in Bidirectional...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5959718108004352 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x605000000221 Crash State: bfdgetl32 evaxbfdprintimage...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_mach_o_arm_canonicalize_one_reloc

Detailed Report: https://oss-fuzz.com/testcase?key=4890616769675264 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000000038 Crash State: bfdmachoarmcanonicalizeonereloc...