Lucene search
+L

6101 matches found

ossfuzz
ossfuzz
added 2020/05/20 11:46 p.m.24 views

binutils:fuzz_readelf: Crash in get_num_dynamic_syms

Detailed Report: https://oss-fuzz.com/testcase?key=5709125748260864 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6117fff9f980 Crash State: getnumdynamicsyms processdynamicsection...

6.8AI score
SaveExploits0Affected Software1
Cloud Foundry
Cloud Foundry
added 2020/05/14 12:00 a.m.240 views

USN-4336-1: GNU binutils vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU...

9.8CVSS7.8AI score0.06606EPSS
SaveExploits36Affected Software1
RedhatCVE
RedhatCVE
added 2020/05/05 8:09 p.m.34 views

CVE-2019-12972

An out-of-bounds read was discovered in Binutils while it processes a malformed ELF relocatable file .o file. A victim user who uses Binutils tools size, gdb, readelf to analyze untrusted binaries, may be vulnerable to a denial of service attack...

5.5CVSS2.4AI score0.01802EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2020/04/30 12:00 a.m.52 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1548)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.04037EPSS
SaveExploits9References2
Veracode
Veracode
added 2020/04/29 2:43 a.m.24 views

Denial Of Service (DoS)

binutils is vulnerable to denial of service. The vulnerability exists in gold/fileread.cc and elfcpp/elfcppfile.h due to improper input validation in eshoff header field which allows an attacker to crash the application via malicious input...

5.5CVSS6.1AI score0.01115EPSS
SaveExploits0References7Affected Software1
RedHat Linux
RedHat Linux
added 2020/04/28 3:47 p.m.65 views

Low: Red Hat Security Advisory: binutils security and bug fix update

An update for binutils is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

6.5CVSS6.6AI score0.02396EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2020/04/28 3:47 p.m.18 views

binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c, as demonstrated by nm...

6.5CVSS7.3AI score0.02396EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2020/04/28 12:00 a.m.43 views

RHEL 8 : binutils (RHSA-2020:1797)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1797 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includ...

6.5CVSS6.5AI score0.02396EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2020/04/24 12:00 a.m.90 views

Ubuntu 18.04 LTS : GNU binutils vulnerabilities (USN-4336-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4336-1 advisory. It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a...

9.8CVSS6.9AI score0.06606EPSS
SaveExploits36References44
OpenVAS
OpenVAS
added 2020/04/23 12:00 a.m.54 views

Ubuntu: Security Advisory (USN-4336-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.06606EPSS
SaveExploits36References2
NCSC
NCSC
added 2020/04/23 12:00 a.m.5 views

Vulnerabilities fixed in binutils

Vulnerabilities have been fixed in binutils. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to system data Ubuntu classifies all vulnerabilities...

9.8CVSS7.6AI score0.06606EPSS
SaveExploits35
Ubuntu
Ubuntu
added 2020/04/22 11:40 a.m.184 views

USN-4336-1: GNU binutils vulnerabilities

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code...

9.8CVSS6.5AI score0.06606EPSS
SaveExploits36
OSV
OSV
added 2020/04/22 11:40 a.m.6 views

USN-4336-1 binutils vulnerabilities

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code...

9.8CVSS6.7AI score0.06606EPSS
SaveExploits36References45
OpenVAS
OpenVAS
added 2020/04/16 12:00 a.m.43 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.08544EPSS
SaveExploits47References2
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:00 a.m.49 views

EulerOS Virtualization 3.0.2.2 : binutils (EulerOS-SA-2020-1466)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service NULL pointer dereference and application crash,...

9.8CVSS7.2AI score0.08544EPSS
SaveExploits47References86
OpenVAS
OpenVAS
added 2020/04/16 12:00 a.m.31 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1372)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.02458EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2020/04/15 12:00 a.m.33 views

EulerOS 2.0 SP3 : binutils (EulerOS-SA-2020-1372)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The getcount function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of servi...

7.8CVSS6.8AI score0.02458EPSS
SaveExploits5References6
RedhatCVE
RedhatCVE
added 2020/04/08 9:06 p.m.46 views

CVE-2018-12698

demangletemplate in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption aka OOM during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump...

7.5CVSS6AI score0.06606EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2020/04/08 5:28 a.m.42 views

CVE-2018-19932

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the ISCONTAINEDBYLMA macro in elf.c...

5.5CVSS2.7AI score0.01977EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2020/04/08 5:20 a.m.24 views

CVE-2018-20623

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the processarchive function in readelf.c via a crafted ELF file...

5.5CVSS3.6AI score0.01817EPSS
SaveExploits1References2
Rows per page
Query Builder