CVE-2017-9043

readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...

CVE-2017-9044

Technical details for CVE-2017-9044 are not provided in the connected documents. The initial description notes a denial of service via crafted ELF in Binutils, but no concrete affected versions or fixes are given here. Monitor for updates.

CVE-2017-9042

readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...

CVE-2017-9038

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to the bytegetlittleendian function in elfcomm.c, the getunwindsectionword function in readelf.c, and ARM unwind information that contains inval...

CVE-2017-9044

The printsymbolforbuildattribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service invalid read and SEGV via a crafted ELF file...

CVE-2017-9042

GNU Binutils readelf.c (CVE-2017-9042) had a “cannot be represented in type long” issue that could crash the process via a crafted ELF file. The Connected document CLSA-2025:1760112341 reports a fix for CVE-2017-9042 (binutils: Fix of CVE-2017-9042) in CloudLinux update info for CentOS6 ELs; reme...

CVE-2017-9043

CVE-2017-9043 : GNU Binutils readelf (the readelf.c functionality in Binutils dated 2017-04-12) contains a “shift exponent too large for type unsigned long” issue that could allow a remote attacker to cause a denial of service (application crash) or potentially other impact via a crafted ELF file...

CVE-2017-9040

GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service NULL pointer dereference and application crash, related to the processmipsspecific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt...

CVE-2017-9043: Improper Input Validation

readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...

CVE-2017-9042: Incorrect Type Conversion or Cast

readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...

CVE-2017-9041: Out-of-bounds Read

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-9040: NULL Pointer Dereference

GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service NULL pointer dereference and application crash, related to the processmipsspecific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt...

CVE-2017-9039: Allocation of Resources Without Limits or Throttling

GNU Binutils 2.28 allows remote attackers to cause a denial of service memory consumption via a crafted ELF file with many program headers, related to the getprogramheaders function in readelf.c...

PT-2017-18663

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-03 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This is related to the process mips specific function in readelf.c, whic...

PT-2017-18666

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-12 Description The issue in readelf.c might allow remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted ELF file...

PT-2017-18662

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by utilizing a crafted ELF file that contains many program headers. This is related to the get program heade...

CVE-2017-9038: Out-of-bounds Read

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to the bytegetlittleendian function in elfcomm.c, the getunwindsectionword function in readelf.c, and ARM unwind information that contains inval...

PT-2017-18665

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-12 Description The issue in readelf.c might allow remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted ELF file...

CVE-2017-9044: Out-of-bounds Read

The printsymbolforbuildattribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service invalid read and SEGV via a crafted ELF file...

PT-2017-18664

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, by providing a crafted ELF file. This is related to the mishandling of MIPS...