Scientific Linux Security Update : binutils on SL7.x x86_64 (20190806)

Security Fixes : - binutils: integer overflow leads to heap-based buffer overflow in objdump CVE-2018-1000876 - binutils: Stack Exhaustion in the demangling functions provided by libiberty CVE-2018-12641 - binutils: NULL pointer dereference in workstuffcopytofrom in cplus- dem.c. CVE-2018-12697 C...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-1799)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - elflink.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has a 'member access within null pointer'...

Critical Photon OS Security Update - PHSA-2019-0026

Updates of 'expat', 'postgresql', 'u-boot', 'grub2', 'haproxy', 'linux-esx', 'zeromq', 'linux', 'mysql', 'linux- secure', 'linux-aws', 'binutils', 'libssh2' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0248

Updates of 'systemd', 'libmspack', 'patch', 'dracut', 'binutils', 'mysql' packages of Photon OS have been released...

CVE-2019-14444

applyrelocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation in byteputlittleendian function in elfcomm.c via an ELF file, as demonstrated by readelf...

binutils security and bug fix update

2.27-41.base.0.1 - Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R386GOT32/R386GOT32X IFUNC reloc error Orabug 27930573 - Reviewed-by: Jose E. Marchesi 2.27-41.base - Fix up some linker tests that fail because of the Rx8664GOTPCRELX patch. 169974...

NewStart CGSL CORE 5.04 / MAIN 5.04 : binutils Multiple Vulnerabilities (NS-SA-2019-0060)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has binutils packages installed that are affected by multiple vulnerabilities: - The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service...

GLSA-201908-01 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-01 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review the referenced CVE identifiers for details. Impact : A remote attacker, by enticing a user to compile/execute a...

RHEL 7 : binutils (RHSA-2019:2075)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2075 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includ...

Denial Of Service (Dos)

binutils is vulnerable to denial of service. A NULL pointer dereference in the function workstuffcopytofrom in cplus-dem.c which can occur during execution of objdump allows an attacker to crash the application...

Denial Of Service (Dos)

binutils is vulnerable to denial of service. Stack Exhaustion in the demangling functions allow an attacker to crash the application during execution of nm-new...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. An integer overflow in objdump, bfdgetdynamicrelocupperbound and bfdcanonicalizedynamicreloc allows a local attacker to execute arbitrary code...

binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.

A NULL pointer dereference aka SEGV on unknown address 0x000000000000 was discovered in workstuffcopytofrom in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump...

Moderate: Red Hat Security Advisory: binutils security and bug fix update

An update for binutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

binutils: Stack Exhaustion in the demangling functions provided by libiberty

An issue was discovered in armpt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglearmhptemplate, demangleclassname, demanglefundtype, dotype, doarg,...

binutils: integer overflow leads to heap-based buffer overflow in objdump

binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfdgetdynamicrelocupperbound,bfdcanonicalizedynamicreloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be...

Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review the referenced CVE...

CVE-2019-1010204

GNU binutils gold gold v1.11-v1.16 GNU binutils v2.21-v2.31.1 is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcppfile.h:644. The attack vector is: An ELF file with an...

GNU Binutils Input Validation Error Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

CVE-2019-14444

applyrelocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation in byteputlittleendian function in elfcomm.c via an ELF file, as demonstrated by readelf...