CVE-2017-9753: Improper Restriction of Operations within the Bounds of a Memory Buffer

The versadosmkobject function in bfd/versados.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly hav...

GNU binutils - ieee_object_p Stack Buffer Overflow

GNU binutils - ieeeobjectp Stack Buffer Overflow Source: https://sourceware.org/bugzilla/showbug.cgi?id=21582 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

PT-2017-19151

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the sh elf set mach from flags function in the BFD library, which can be exploited by remote attackers using a crafted binary file. This can lead to a denial of service, causing a...

PT-2017-19156

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, potentially leading to a buffer overflow and application crash, or possibly having other unspecified impacts. This can be achieved through a...

PT-2017-19159

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This occurs via a crafted binary file, whic...

PT-2017-19160

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the versados mkobject function in the Binary File Descriptor BFD library, which does not initialize a certain data structure. This allows remote attackers to cause a denial of...

PT-2017-19161

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the process otr function in the BFD library, which fails to validate a certain offset. This can be exploited by remote attackers using a crafted binary file, potentially leading to ...

PT-2017-19152

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This occurs via a crafted binary file, whic...

PT-2017-19158

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to an unbounded GETBYTE macro in the opcodes/rl78-decode.opc file of GNU Binutils. This allows remote attackers to cause a denial of service, resulting in a buffer overflow and...

PT-2017-19149 · Gnu +1 · Gnu Binutils +1

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.28 Description: The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This can be achieved by using a crafted...

PT-2017-19155

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the ieee object p function in the BFD library, which may allow remote attackers to cause a denial of service, such as a buffer overflow and application crash, or possibly have other...

GNU binutils - rx_decode_opcode Buffer Overflow

GNU binutils - rxdecodeopcode Buffer Overflow Source: https://sourceware.org/bugzilla/showbug.cgi?id=21587 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

GNU binutils - disassemble_bytes Heap Overflow

GNU binutils - disassemblebytes Heap Overflow Source: https://sourceware.org/bugzilla/showbug.cgi?id=21580 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

GNU binutils - decode_pseudodbg_assert_0 Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21586 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

GNU binutils - bfd_get_string Stack Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21581 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

GNU binutils - ieee_object_p Stack Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21582 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

PT-2017-19154

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to the ieee archive p function in the BFD library, which may allow remote attackers to cause a denial of service, such as a buffer overflow and application crash, or possibly have othe...

PT-2017-19162

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This can be achieved by using a crafted...

PT-2017-19157

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to a lack of bounds checks for certain scale arrays in the opcodes/rx-decode.opc file. This can be exploited by remote attackers using a crafted binary file, potentially leading to a...

PT-2017-19153

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, potentially leading to a buffer overflow and application crash, or possibly having other unspecified impacts. This occurs through the...