binutils:fuzz_windres: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6664251322793984 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzwindres Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite

Detailed Report: https://oss-fuzz.com/testcase?key=6020938102079488 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdbwrite...

binutils:fuzz_dlltool: Heap-buffer-overflow in yylex

Detailed Report: https://oss-fuzz.com/testcase?key=5499010689925120 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdlltool Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60900001c0d4 Crash State: yylex yyparse processdeffile Sanitize...

USN-5124-1: GNU binutils vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Several security issues were fixed in GNU binutils. CVEs contained in this USN include: CVE-2020-16592, CVE-2021-3487. Affected Cloud Foundry Products and Versions Severity is low unless otherwise noted...

NewStart CGSL MAIN 6.02 : binutils Multiple Vulnerabilities (NS-SA-2021-0122)

The remote NewStart CGSL host, running version MAIN 6.02, has binutils packages installed that are affected by multiple vulnerabilities: - findabstractinstance in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32, allows remote attackers to cause a...

NewStart CGSL CORE 5.04 / MAIN 5.04 : binutils Multiple Vulnerabilities (NS-SA-2021-0096)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has binutils packages installed that are affected by multiple vulnerabilities: - The bfdcacheclose function in bfd/cache.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier,...

binutils:fuzz_as: Global-buffer-overflow in fb_label_name

Detailed Report: https://oss-fuzz.com/testcase?key=6573825794375680 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow WRITE 1 Crash Address: 0x000002630998 Crash State: fblabelname readasourcefile...

Ubuntu 18.04 LTS / 20.04 LTS : GNU binutils vulnerabilities (USN-5124-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5124-1 advisory. It was discovered that GNU binutils incorrectly handled certain hash lookups. An attacker could use this issue to cause GNU binutils to crash...

Ubuntu: Security Advisory (USN-5124-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5161881669599232 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60900000047b Crash State: bfdgetl16 evaxbfdprinteobj...

binutils:fuzz_as: Use-of-uninitialized-value in input_file_open

Detailed Report: https://oss-fuzz.com/testcase?key=5756501302575104 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inputfileopen inputscrubnewfile readasourcefile...

USN-5124-1: GNU binutils vulnerabilities

It was discovered that GNU binutils incorrectly handled certain hash lookups. An attacker could use this issue to cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2020-16592 It was discovered that GNU binutils incorrectly handled certain corru...

USN-5124-1 binutils vulnerabilities

It was discovered that GNU binutils incorrectly handled certain hash lookups. An attacker could use this issue to cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2020-16592 It was discovered that GNU binutils incorrectly handled certain corru...

binutils:fuzz_as: Stack-use-after-return in as_bad_internal

Detailed Report: https://oss-fuzz.com/testcase?key=6647837241245696 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Stack-use-after-return READ Crash Address: 0x7fe066d15820 Crash State: asbadinternal asbadwhere...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5959718108004352 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x605000000221 Crash State: bfdgetl32 evaxbfdprintimage...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_mach_o_arm_canonicalize_one_reloc

Detailed Report: https://oss-fuzz.com/testcase?key=4890616769675264 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000000038 Crash State: bfdmachoarmcanonicalizeonereloc...

binutils:fuzz_objdump: Heap-buffer-overflow in aout_get_external_symbols

Detailed Report: https://oss-fuzz.com/testcase?key=6158584564547584 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdump Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6020000000d3 Crash State: aoutgetexternalsymbols...

CLSA-2021-1634922380 Fixed CVE-2021-3487 in binutils

CVE-2021-3487: excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c readsection...

binutils:fuzz_nm: Heap-buffer-overflow in aout_get_external_symbols

Detailed Report: https://oss-fuzz.com/testcase?key=6169143708090368 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzznm Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x605000000273 Crash State: aoutgetexternalsymbols aout16readminisymbo...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-2521)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...