Information Disclosure

binutils is vulnerable to information disclosure. A heap-based buffer overflow from an integer overflow in the function simpleobjectelfmatch in simple-object-elf.c allows an attacker to obtain arbitrary data from memory. This is due to a lack of check for a zero shstrndx value...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A Stack Exhaustion in debugwritetype in debug.cdue to a DEBUGKINDINDIRECT infinite recursion allows an attacker to crash the application...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists through an excessive memory allocation in bfdelfslurpversiontables in elf.c...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. The vulnerability exists in the bfdgenericreadminisymbols function of syms.c in the Binary File Descriptor BFD, allowing a malicious user to cause an application crash via a crafted ELF file...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. It is a stack consumption issue in dcounttemplatesscopes in cp-demangle.c after many recursive calls...

Buffer Overflow

binutils:bionic is vulnerable to buffer overflow. finishstab in stabs.c allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow in processmipsspecific in readelf.c via a malformed MIPS option section...

CVE-2019-9075 affecting package binutils 2.32-5

CVE-2019-9075 affecting package binutils 2.32-5. A patched version of the package is available...

CVE-2019-9070 affecting package binutils 2.32-5

CVE-2019-9070 affecting package binutils 2.32-5. A patched version of the package is available...

CVE-2019-9077 affecting package binutils 2.32-5

CVE-2019-9077 affecting package binutils 2.32-5. A patched version of the package is available...

EulerOS Virtualization for ARM 64 3.0.2.0 : binutils (EulerOS-SA-2020-1984)

According to the version of the binutils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - rememberKtype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessiv...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1984)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value leading to an integer overflow and resultant heap-based buffer overflow.

...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.

...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c when called from pex64_get_runtime_function in pei-x86_64.c.

...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.

...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c as demonstrated by nm.

...

An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.

...

apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file as demonstrated by readelf.

...