binutils:fuzz_objdump_safe: Heap-use-after-free in bfd_close_all_done

Detailed Report: https://oss-fuzz.com/testcase?key=6410665702588416 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdumpsafe Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x615000001008 Crash State: bfdclosealldone...

Heap-buffer-overflow

binutils, edge is vulnerable to a heap buffer overflow. The vulnerability exists in bfdgetl32 function when called from the stripmain function in strip-new via a malicious file...

GNU Binutils Dwarf2 Read Section DoS

The vulnerability of the readsection function in the dwarf2.c component of the GNU Binutils development environment is related to insufficient input data validation. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure using a specially created file...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. The vulnerability exists due to an assertion fail in the displaydebugnames function in binutils/dwarf.c allowing an attacker to crash the system...

Denial Of Service (DoS)

binutils:sid is vulnerable denial of service. A NULL pointer dereference in the readanddisplayattrvalue function in binutils/dwarf.c may lead to program crash when parsing corrupt DWARF data...

libbfd Heap Buffer Overflow DoS

The vulnerability of the libbfd library’s bfdhashlookup function in the GNU Binutils development environment is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-38533

A vulnerability was found in the strip utility of binutils. An attacker able to convince a victim to process a specially crafted COFF file by the strip utility can lead to a heap-based buffer overflow, causing the utility to crash. Mitigation Do not process untrusted files with the strip utility...

binutils:fuzz_disas_ext-bfd_arch_arm: Index-out-of-bounds in print_insn_thumb32

Detailed Report: https://oss-fuzz.com/testcase?key=5488680399142912 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasext-bfdarcharm Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: printinsnthumb32 printinsn...

binutils:fuzz_strings: Use-of-uninitialized-value in _bfd_vms_slurp_etir

Detailed Report: https://oss-fuzz.com/testcase?key=6289113178832896 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzstrings Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdvmsslurpetir bfdvmsslurpobjectrecords...

CVE-2022-38128 vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2022-38128 vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2022-38127

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-38128

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-38126

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-38127

Removed by vendor...

CVE-2022-38128

Removed by vendor...

CVE-2022-38126

Removed by vendor...

In GNU Binutils before 2.40 there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.

...

PT-2022-24219

Name of the Vulnerable Software and Affected Versions binutils affected versions not specified Description An assertion failure in the display debug names function in binutils/dwarf.c may lead to a program crash and denial of service. This issue was initially reported but later withdrawn by its C...

PT-2022-24220

Name of the Vulnerable Software and Affected Versions binutils affected versions not specified Description A NULL pointer dereference in the read and display attr value function in binutils/dwarf.c may lead to a program crash when parsing corrupt DWARF data. Recommendations At the moment, there i...