The vulnerability of the `ignore_section_sym` function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the ignoresectionsym function in the GNU Binutils development toolset is related to the lack of NULL check and the assignment of the outputsection pointer when writing a symtab with the type “SECTION”. Exploitation of this vulnerability could allow an attacker to cause servic...

The vulnerability of the sec_merge_hash_lookup function in the GNU Binutils development tool, related to incorrect checking of memory access boundaries, allows a hacker to trigger a service failure.

The vulnerability of the secmergehashlookup function in the GNU Binutils development tooling is related to improper checking of memory access boundaries, which can lead to reading beyond the buffer’s bounds, especially when the size of a segment is not a multiple of the size of a single record...

The vulnerability of the GNU Binutils development tool lies in its ability to perform an unlimited number of recursive calls for a group of functions, allowing an attacker to trigger a service failure.

The vulnerability of the GNU Binutils development tooling is related to the unlimited recursive execution of a set of functions demanglenestedargs, demangleargs, doarg, and dotype from the cplus-dem.c file. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability in the cplus-dem.c file of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability in the cplus-dem.c file of the GNU Binutils development environment is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the elf_link_input_bfd function in the GNU Binutils development environment, related to the handling of zero pointer assignments, allows a hacker to trigger a service failure.

The vulnerability of the elflinkinputbfd function in the GNU Binutils development toolset is related to the use of a null pointer pointer when searching for STTTLS symbols, especially when TLS sections are not present. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the _bfd_add_merge_section function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the bfdaddmergesection function in the GNU Binutils development environment is related to the assignment of a null pointer when attempting to merge sections with large differences. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the _bfd_XX_bfd_copy_private_bfd_data_common functions in the GNU Binutils development environment, related to an unlimited loop that processes data directories, allows a perpetrator to trigger writes beyond the buffer limit.

The vulnerability of the bfdXXbfdcopyprivatebfddatacommon functions peXXigen.c in the GNU Binutils development toolset is related to an unlimited data directory processing cycle, which involves sequential memory writing. Exploiting this vulnerability can allow a remote attacker to trigger writing...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-1019)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library CVE-2018-7568 - binutils: integer underflow...

The vulnerability of the displaydebug_ranges function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the displaydebugranges function in the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the coff_pointerize_aux function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the coffpointerizeaux function in the GNU Binutils development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the `parse_die` function in the GNU Binutils development environment allows a perpetrator to trigger a service failure.

The vulnerability of the parsedie function in the GNU Binutils development toolset is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by using an ELF file with a corrupted DWARF FORM block...

The vulnerability of the `load_specificdebug_section` function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the GNU Binutils development tool is related to a numerical overflow of the loadspecific DebugSection function in objdump.c, which results in the allocation of zero-sized memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the elf_parse_notes function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the elfparsenotes function in the GNU Binutils development toolset is related to errors in accessing data beyond the specified buffer. Exploiting this vulnerability could allow a malicious actor to cause service failures by using an ELF file with a NOTES segment having a larg...

The vulnerability of the `parse_die` function in the GNU Binutils development environment allows a perpetrator to trigger a service failure.

The vulnerability of the parsedie function in the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure through an ELF file with corrupted debugging information in dwarf1...

The vulnerability of the `assign_file_positions_for_non_load_sections` function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the assignfilepositionsfornonloadsections function in the GNU Binutils development environment is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by using an ELF file with a RELRO segment that lacks...

The vulnerability of the bfd_getdebug_link_info_1 function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdgetdebuglinkinfo1 function in the GNU Binutils development toolset is related to the lack of checks for the result of the strnlen function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `swap_std_reloc_in` function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the swapstdrelocin function in the GNU Binutils development environment is related to the swapping of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Photon OS 1.0: Binutils PHSA-2017-0010

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121676;...

Photon OS 1.0: Binutils PHSA-2019-1.0-0203

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0203. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Binutils PHSA-2018-1.0-0104

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0104. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...