Medium: binutils

Issue Overview: Potential heap based buffer overflow found in bfdelfslurpversiontables in bfd/elf.c. CVE-2023-1972 Affected Packages: binutils Issue Correction: Run dnf update binutils --releasever 2023.1.20230628 or dnf update --advisory ALAS2023-2023-229 --releasever 2023.1.20230628 to update...

Important Photon OS Security Update - PHSA-2023-3.0-0604

Updates of 'docker-compose', 'binutils' packages of Photon OS have been released...

F5 Networks BIG-IP : Binutils vulnerability (K42059040)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K42059040 advisory. - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. I...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0036

Updates of 'libXi', 'nmap', 'binutils', 'lua' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0036

Updates of 'libXi', 'lua', 'binutils', 'nmap' packages of Photon OS have been released...

Ubuntu: Security Advisory (USN-6160-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6160-1 binutils vulnerability

It was discovered that GNU binutils incorrectly performed bounds checking operations when parsing stabs debugging information. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

USN-6160-1: GNU binutils vulnerability

It was discovered that GNU binutils incorrectly performed bounds checking operations when parsing stabs debugging information. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

Ubuntu 20.04 LTS : GNU binutils vulnerability (USN-6160-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6160-1 advisory. It was discovered that GNU binutils incorrectly performed bounds checking operations when parsing stabs debugging information. An attacker could possibly use this...

EulerOS Virtualization 3.0.6.0 : binutils (EulerOS-SA-2023-2207)

According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-381...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2207)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-2106)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-3812...

EulerOS Virtualization 2.11.1 : binutils (EulerOS-SA-2023-2054)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-3812...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2106)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Services (DoS)

binutils is vulnerable to Denial Of Services DoS. The vulnerability exists due to the heap based buffer overflow in the bfdelfslurpversiontables function of the elf.c, which allows an attacker to cause an application crash...

binutils:fuzz_nm: Heap-buffer-overflow in _bfd_ecoff_slurp_symbol_table

Detailed Report: https://oss-fuzz.com/testcase?key=5148773215764480 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzznm Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x624000006008 Crash State: bfdecoffslurpsymboltable...

binutils:fuzz_as: Heap-use-after-free in hash_symbol_entry

Detailed Report: https://oss-fuzz.com/testcase?key=6268463220654080 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x62100002c414 Crash State: hashsymbolentry htabfindslot...

binutils:fuzz_nm: Crash in display_rel_file

Detailed Report: https://oss-fuzz.com/testcase?key=4516103192444928 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzznm Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6240746387c5 Crash State: displayrelfile displayfile fuzznm.c Sanitizer:...

binutils:fuzz_readelf: Crash in target_specific_reloc_handling

Detailed Report: https://oss-fuzz.com/testcase?key=5308001125531648 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzreadelf Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000190d8d80 Crash State: targetspecificrelochandling...