Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers...

Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.

Summary GNU Binutils is used by IBM Netezza Platform Software. IBM Netezza Platform Software has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-17450 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an infinite recursion in findabstractinstance in...

PT-2020-6911 · Gnu +5 · Binutils +5

Name of the Vulnerable Software and Affected Versions: binutils version 2.36 Description: An issue was discovered in binutils libbfd.c relating to the auxiliary symbol data, allowing attackers to read or write to system memory or cause a denial of service. The vulnerability is also described as a...

binutils:fuzz_readelf: Heap-buffer-overflow in slurp_hppa_unwind_table

Detailed Report: https://oss-fuzz.com/testcase?key=4815629438418944 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x6020000000c0 Crash State: slurphppaunwindtable...

binutils:fuzz_disassemble: Global-buffer-overflow in print_insn_arc

Detailed Report: https://oss-fuzz.com/testcase?key=6258025384640512 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001427320 Crash State: printinsnarc...

binutils:fuzz_readelf: Stack-buffer-overflow in print_dynamic_symbol

Detailed Report: https://oss-fuzz.com/testcase?key=5953247323095040 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f67ff9a3340 Crash State: printdynamicsymbol...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1743)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : binutils (EulerOS-SA-2020-1743)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The bfdgenericreadminisymbols function in syms.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU...

binutils:fuzz_bfd: Use-of-uninitialized-value in _bfd_pei_slurp_codeview_record

Detailed Report: https://oss-fuzz.com/testcase?key=5941009199661056 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdpeislurpcodeviewrecord pebfdreadbuildid...

binutils:fuzz_readelf: Heap-use-after-free in make_qualified_name

Detailed Report: https://oss-fuzz.com/testcase?key=5750482235817984 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6020000000b0 Crash State: makequalifiedname...

EulerOS 2.0 SP2 : binutils (EulerOS-SA-2020-1635)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - rememberKtype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption a...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1635)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

binutils:fuzz_readelf: Heap-buffer-overflow in byte_get_little_endian

Detailed Report: https://oss-fuzz.com/testcase?key=5524650569498624 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzreadelf Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000000150 Crash State: bytegetlittleendian...

binutils:fuzz_disassemble: Stack-buffer-overflow in bfd_put_bits

Detailed Report: https://oss-fuzz.com/testcase?key=5685956790452224 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzdisassemble Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fc07017e864 Crash State: bfdputbits...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1593)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : gcc9 (openSUSE-2020-716)

This update includes the GNU Compiler Collection 9. This update ships the GCC 9.3 release. A full changelog is provided by the GCC team on : https://www.gnu.org/software/gcc/gcc-9/changes.html The base system compiler libraries libgccs1, libstdc++6 and others are now built by the gcc 9 packages. ...

binutils:fuzz_disassemble: Use-of-uninitialized-value in print_insn_ns32k

Detailed Report: https://oss-fuzz.com/testcase?key=5747669472641024 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printinsnns32k fuzzdisassemble.c...

openSUSE: Security Advisory for gcc9 (openSUSE-SU-2020:0716-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for gcc9 (moderate)

openSUSE Security Update: Security update for gcc9 Announcement ID: openSUSE-SU-2020:0716-1 Rating: moderate References: 1114592 1135254 1141897 1142649 1142654 1148517 1149145 1149995 1152590 1167898 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 An update...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-1593)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - applyrelocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation in...