Moderate: Red Hat Security Advisory: binutils security update

An update for binutils is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...

RHEL 8 : binutils (RHSA-2023:7394)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7394 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

Oracle Linux 9 : binutils (ELSA-2023-6593)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6593 advisory. 2.35.2-42.0.1 - Forward-port Oracle patches to 2.35.2-42. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

GNU Binutils pe_print_idata Heap Buffer Overflow DoS

The vulnerability of the peprintidata function in the peXXigen.c component of the GNU Binutils development environment is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created PE fi...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the bfdvmssavesizedstring function in the vms-misc.c component of the GNU Binutils development environment is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

GNU Binutils Alpha Buffer Overflow DoS

The vulnerability of the alphavmsobjectp function in the bfd/vms-alpha.c component of the GNU Binutils development environment is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

bfd coff-rs6000 function Heap Buffer Overflow DoS

The vulnerability of the bfdxcoffreadarhdr function in the bfd/coff-rs6000.c component of the GNU Binutils development environment is related to reading data beyond the allowed limits of the buffer. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...

GNU Binutils getsym Buffer Overflow DoS

The vulnerability in the getsym function of the tekhex.c component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

GNU Binutils Development Environment DoS

The vulnerability of the setupgroup function in the elf.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

GNU Binutils Development Environment DoS

The vulnerability of the elf64-x86-64.c component of the GNU Binutils development environment is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

GNU Binutils Development Environment Confidential Data Access DoS

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

GNU Binutils coff_slurp_line_table Buffer Overflow DoS

The vulnerability of the coffslurplinetable function in the coffcode.h component of the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

GNU Binutils Dwarf Function Buffer Overflow DoS

The vulnerability of the displaydebugframes function in the dwarf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the nm.c and objdump.c components of the GNU Binutils development environment is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

GNU Binutils Development Environment concat_filename Function Heap Buffer Overflow DoS

The vulnerability of the concatfilename function in the dwarf2.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the cplus-dem.c component of the GNU Binutils development environment is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...

libiberty cp-demangle Heap Buffer Overflow DoS

The vulnerability of the libiberty/cp-demangle.c component of the GNU Binutils development environment is related to an uncontrolled recursion. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the dname, dencoding, and dlocalname functions in the cp-demangle.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker who operates remotely to trigge...

GNU Binutils ELF BFD Buffer Overflow DoS

The vulnerability of the ISCONTAINEDBYLMA macro in the bfd/elf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...