23 matches found
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the elfx8664commonsectionindex function of the ELF Section Handler component. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediation A fix was...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow in the elfx8664relocatesection function due to improper handling of the roff argument. An attacker can achieve unauthorized access to memory and potentially execute arbitrary code by supplying a specially crafted input...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the bfdx86elflatesizesections function. An attacker can cause a denial of service by triggering an out-of-bounds read through local access. Remediation A fix was pushed into the master branch but not yet published...
EUVD-2023-23812
Malicious code in bioql PyPI...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the bfdelfparseehframe function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input to the process. Remediation A fix was pushed into the master branch...
Missing Release of Memory after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the processdebuginfo function in the dwarf.c file. An attacker can cause resource exhaustion by triggering repeated processing of specially crafted DWARF sections. Remediation A fix...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the bfdelfgetstrsection function in the bfd/elf.c file. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - POC Credit: John Reiser...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the heap process. An attacker can execute arbitrary code, cause a denial of service, or alter data by providing crafted input to the affected binary tools after gaining local access. Remediation A fix was...
DEBIAN-CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
ALPINE-CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
Heap overflow
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
CVE-2023-1579: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
CVE-2023-1579
CVE-2023-1579 is a heap-based buffer overflow in GNU binutils’ binutils-gdb/bfd/libbfd.c (function bfd_getl64 ). The connected documents confirm this is triggered when processing input, enabling a potential local attacker to cause a crash or execute arbitrary code, as reflected by the CVSS vector...
