7510 matches found
PT-2020-6702
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.34 Description A use after free issue exists in the Binary File Descriptor BFD library, specifically in the bfd hash lookup function, which can cause a denial of service via a crafted file. This issue is demonstrated in...
Denial Of Service (DoS)
binutils is vulnerable to denial of service DoS. The vulnerability exists in setupgroup function which allows a malicious user to cause an application crash...
Denial Of Service (DoS)
binutils-mingw-w64 is vulnerable to denial of service DoS. The vulnerability exists in the srecscan function in bfd/srec.c, allowing a malicious user to cause an out-of-bounds read via a small S-record...
Arbitrary Code Execution
binutils is vulnerable to arbitrary code execution. The bfdXXiswapaouthdrin function in bfd/peXXigen.c allows remote attackers to cause a denial of service out-of-bounds write via a malicious NumberOfRvaAndSizes field in the AOUT header in a PE executable...
Denial Of Service (DoS)
binutils-mingw-w64 is vulnerable to denial of service DoS. The vulnerability exists through a stack-based buffer overflow in the srecscan function in bfd/srec.c in GNU binutils 2.24 allows an attacker to crash the application and other unspecified impact using crafted file...
Denial Of Service (DoS)
GNU binutils is vulnerable to denial of service attacks. A remote attacker could cause heap-based buffer overflow in the peprintedata function in bfd/peXXigen.c via a truncated export table in a PE file resulting in a system crash...
Arbitrary Code Execution
binutils is vulnerable to arbitrary code execution. A stack-based buffer overflow in the ihexscan function in bfd/ihex.c allows remote attackers to crash the application and potentially allow for arbitrary code execution on the host OS via a malicious ihex file...
Arbitrary File Write
binutils is vulnerable to directory traversal. Local users are able to delete arbitrary files via a ../ in the file name or an absolute path name in a malicious archive to strip or perform an objcopy or create arbitrary files...
Denial Of Service (DoS)
binutils-mingw-w64 is vulnerable to denial of service DoS. The vulnerability exists in the bfdslurpextendednametable function in bfd/archive.c in GNU binutils, allowing a malicious user to crash the application via a crafted extended name table in an archive...
PT-2021-7939
Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.35 and earlier Description The issue is related to an open race window when writing output in certain utilities, including ar, objcopy, strip, and ranlib. This can be exploited by an unprivileged user to trick these...
CVE-2019-12972 affecting package binutils 2.32-5
CVE-2019-12972 affecting package binutils 2.32-5. A patched version of the package is available...
CVE-2019-17451 affecting package binutils 2.32-5
CVE-2019-17451 affecting package binutils 2.32-5. A patched version of the package is available...
CVE-2019-14444 affecting package binutils 2.32-5
CVE-2019-14444 affecting package binutils 2.32-5. A patched version of the package is available...
CVE-2019-9074 affecting package binutils 2.32-5
CVE-2019-9074 affecting package binutils 2.32-5. A patched version of the package is available...
CVE-2019-9071 affecting package binutils 2.32-5
CVE-2019-9071 affecting package binutils 2.32-5. A patched version of the package is available...
CVE-2019-14250 affecting package binutils 2.32-5
CVE-2019-14250 affecting package binutils 2.32-5. A patched version of the package is available...
CVE-2019-9072 affecting package binutils 2.32-5
CVE-2019-9072 affecting package binutils 2.32-5. A patched version of the package is available...
CVE-2019-9073 affecting package binutils 2.32-5
CVE-2019-9073 affecting package binutils 2.32-5. A patched version of the package is available...