Important: golang

Issue Overview: os/exec: LookPath may return unexpected paths. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

...

Linux Distros Unpatched Vulnerability : CVE-2020-35507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a flaw in bfdpefparsefunctionstubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file...

Linux Distros Unpatched Vulnerability : CVE-2020-35493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -...

Linux Distros Unpatched Vulnerability : CVE-2019-9072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocatio...

Linux Distros Unpatched Vulnerability : CVE-2020-35496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a flaw in bfdpefscanstartaddress of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump ...

Linux Distros Unpatched Vulnerability : CVE-2020-35494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of...

Linux Distros Unpatched Vulnerability : CVE-2020-35495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer...

binutils:fuzz_as: Use-of-uninitialized-value in get_cie_info

Detailed Report: https://oss-fuzz.com/testcase?key=6393922722267136 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: getcieinfo checkehframe emitexprwithreloc...

Linux Distros Unpatched Vulnerability : CVE-2017-12459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bfdmachoreadsymtabstrtab function in bfd/mach-o.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier,...

Linux Distros Unpatched Vulnerability : CVE-2018-9138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions...

Linux Distros Unpatched Vulnerability : CVE-2025-5245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debugtypesamep of the file /binutils/debug.c of the...

Linux Distros Unpatched Vulnerability : CVE-2017-12448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bfdcacheclose function in bfd/cache.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote...

Linux Distros Unpatched Vulnerability : CVE-2018-10372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - processcutuindex in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a...

Ubuntu 16.04 LTS : GNU binutils vulnerability (USN-7718-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7718-1 advisory. It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2019-9073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocatio...

Linux Distros Unpatched Vulnerability : CVE-2017-14333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The processversionsections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service Integer Overflow, and hang because of a...

USN-7718-1 binutils vulnerability

It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash...

USN-7718-1: GNU binutils vulnerability

It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash...

Linux Distros Unpatched Vulnerability : CVE-2019-14444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - applyrelocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation in byteputlittleendian...