CVE-2020-16599

CVE-2020-16599 concerns a NULL pointer dereference in the GNU Binutils library (libbfd) distributed with Binutils 2.35, specifically in _bfd_elf_get_symbol_version_string used by nm-new, which can cause a denial of service via a crafted ELF file. The connected Nessus entries note an “illegal memo...

CVE-2020-16599

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35, in bfdelfgetsymbolversionstring, as demonstrated in nm-new, that can cause a denial of service via a crafted file...

CVE-2020-16593

CVE-2020-16593 is a Null Pointer Dereference in the Binary File Descriptor (BFD) library (libbfd) as distributed in GNU Binutils 2.35, in scan_unit_for_symbols (addr2line demonstrated), leading to denial of service via a crafted file. Connected sources confirm the issue exists in Binutils compone...

CVE-2020-16593

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35, in scanunitforsymbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file...

CVE-2020-16592

A use after free issue exists in the Binary File Descriptor BFD library aka libbfd in GNU Binutils 2.34 in bfdhashlookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file...

CVE-2020-16591

A Denial of Service vulnerability exists in the Binary File Descriptor BFD in GNU Binutils 2.35 due to an invalid read in processsymboltable, as demonstrated in readeif...

CVE-2020-16591

CVE-2020-16591 : A Denial of Service in the Binary File Descriptor (BFD) of GNU Binutils 2.35 is caused by an invalid read in process_symbol_table (readeif). The description confirms the affected product and root cause and notes a DoS impact. No public details about exploitation methods, affected...

CVE-2020-16591

A Denial of Service vulnerability exists in the Binary File Descriptor BFD in GNU Binutils 2.35 due to an invalid read in processsymboltable, as demonstrated in readeif...

CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

PT-2020-6908

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.34 through 2.35 Description A Null Pointer Dereference issue exists in the Binary File Descriptor BFD library, which can cause a denial of service via a crafted file. The issue is demonstrated in the addr2line tool,...

PT-2020-6910

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.34 through 2.35 Description A Null Pointer Dereference issue exists in the Binary File Descriptor BFD library, as distributed in GNU Binutils, in the bfd elf get symbol version string function, which can cause a denial ...

CVE-2020-16591: Out-of-bounds Read

A Denial of Service vulnerability exists in the Binary File Descriptor BFD in GNU Binutils 2.35 due to an invalid read in processsymboltable, as demonstrated in readeif...

GNU Binutils Resource Management Error Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

PT-2020-6906

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.34 through 2.35 Description A double free vulnerability exists in the Binary File Descriptor BFD also known as libbrd in GNU Binutils. This issue is related to an error in the process symbol table function, as...

PT-2020-6702

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.34 Description A use after free issue exists in the Binary File Descriptor BFD library, specifically in the bfd hash lookup function, which can cause a denial of service via a crafted file. This issue is demonstrated in...

PT-2020-14872

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.34 Description A Null Pointer Dereference issue exists in the Binary File Descriptor BFD library, as distributed in GNU Binutils, in the debug get real type function, as demonstrated in objdump, that can cause a denial o...

binutils -- excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

Hao Wang reports: There's a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption...

PT-2021-7941

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34 Description The issue is related to a flaw in the bfd pef parse function stubs function of bfd/pef.c in binutils, which could allow an attacker to cause a NULL pointer dereference by submitting a crafted file to...

PT-2021-7942

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34 Description The issue is caused by a heap buffer overflow in the bfd pef parse function stubs function in bfd/pef.c, which can lead to an out-of-bounds read. This can be exploited by submitting a crafted PEF fil...