Denial Of Service (DoS)

binutils is vulnerable to Denial Of Service DoS. The vulnerability exists due to the illegal memory access flaw in the library, which allows an attacker to cause an application crash by parsing a malicious ELF file...

Fedora: Security Advisory for mingw-binutils (FEDORA-2023-dbba9e7218)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

binutils:fuzz_objdump: Memcpy-param-overlap in dump_bfd

Detailed Report: https://oss-fuzz.com/testcase?key=5971849797566464 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x626000009100,0x6260000090f8 and 0x000000000000, 0xfffffffffffffff8 Cras...

[SECURITY] Fedora 38 Update: mingw-binutils-2.39-5.fc38

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

Fedora 38 : mingw-binutils (2023-dbba9e7218)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dbba9e7218 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

binutils:fuzz_as: Use-of-uninitialized-value in S_IS_DEFINED

Detailed Report: https://oss-fuzz.com/testcase?key=6538440541077504 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SISDEFINED checkehframe emitexprwithreloc...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1490)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-324-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-552-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-184-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2023-1490)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1405)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1420)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-1420)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 - zlib...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-1405)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 - zlib...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in bfd_coff_reloc16_get_relocated_section_contents

Detailed Report: https://oss-fuzz.com/testcase?key=5390549143388160 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c0000003c0 Crash State:...

binutils:fuzz_addr2line: Heap-buffer-overflow in ecoff_swap_pdr_in

Detailed Report: https://oss-fuzz.com/testcase?key=4580240119955456 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x619000000980 Crash State: ecoffswappdrin bfdecofflocateline...

CVE-2022-4285 affecting package binutils 2.36.1-2

CVE-2022-4285 affecting package binutils 2.36.1-2. A patched version of the package is available...

PT-2023-17094

Name of the Vulnerable Software and Affected Versions binutils-gdb affected versions not specified Description The issue is a heap-based buffer overflow in the bfd getl64 function located in binutils-gdb/bfd/libbfd.c. This overflow can potentially lead to exploitation. No information is provided...

binutils:fuzz_as: Heap-use-after-free in _obstack_free

Detailed Report: https://oss-fuzz.com/testcase?key=5725912579833856 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62100003c108 Crash State: obstackfree xatexitcleanup xexit...