CVE-2019-9070: Out-of-bounds Read

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in cp-demangle.c after many recursive calls...

CVE-2019-9071: Uncontrolled Recursion

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in dcounttemplatesscopes in cp-demangle.c after many recursive calls...

CVE-2019-9074

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfdgetl32 in libbfd.c, when called from pex64getruntimefunction in pei-x8664.c...

CVE-2019-9074

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfdgetl32 in libbfd.c, when called from pex64getruntimefunction in pei-x8664.c...

Critical Photon OS Security Update - PHSA-2019-0209

Updates of 'curl', 'sqlite-autoconf', 'elasticsearch', 'glibc', 'binutils', 'kibana' packages of Photon OS have been released...

PT-2019-6368

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to a heap-based buffer overflow in the process mips specific function of the readelf.c component in GNU Binutils. This can be exploited by a remote attacker using a specially crafted...

PT-2019-6400

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to an out-of-bounds read in the Binary File Descriptor BFD library, specifically in the bfd getl32 function within libbfd.c, which is called from pex64 get runtime function in pei-x86...

PT-2019-1519

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is a heap-based buffer overflow in the bfd archive 64 bit slurp armap function, located in archive64.c, which is part of the Binary File Descriptor BFD library. This can be exploited by a remote...

PT-2019-6399

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to the bfd elf slurp version tables function in the elf.c component of the GNU Binutils, which is associated with unlimited memory allocation. This allows a remote attacker to cause a...

PT-2019-5659

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to the libbfd library, specifically the elf read notes function in elf.c, and is associated with unbounded resource allocation. Exploitation of this issue may allow an attacker to caus...

PT-2019-6367

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to a stack consumption problem in the d count templates scopes function within cp-demangle.c of the GNU libiberty component, which is part of GNU Binutils. This problem occurs after ma...

PT-2019-6366 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.32 Description: The issue is a heap-based buffer over-read in the d expression 1 function in cp-demangle.c after many recursive calls. This can allow a remote attacker to access confidential data, compromise data...

GNU Binutils ignore_section_sym DoS

The vulnerability of the ignoresectionsym function in the GNU Binutils development toolset is related to the lack of NULL check and the assignment of the outputsection pointer when writing a symtab with the type “SECTION”. Exploitation of this vulnerability could allow an attacker to cause servic...

GNU Binutils Recursive Call DoS

The vulnerability of the GNU Binutils development tooling is related to the unlimited recursive execution of a set of functions demanglenestedargs, demangleargs, doarg, and dotype from the cplus-dem.c file. Exploiting this vulnerability could allow an attacker to trigger a service failure...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the secmergehashlookup function in the GNU Binutils development tooling is related to improper checking of memory access boundaries, which can lead to reading beyond the buffer’s bounds, especially when the size of a segment is not a multiple of the size of a single record...

GNU Binutils Development Environment DoS

The vulnerability in the cplus-dem.c file of the GNU Binutils development environment is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the bfdXXbfdcopyprivatebfddatacommon functions peXXigen.c in the GNU Binutils development toolset is related to an unlimited data directory processing cycle, which involves sequential memory writing. Exploiting this vulnerability can allow a remote attacker to trigger writing...

GNU Binutils ELF Link Bypass DoS

The vulnerability of the elflinkinputbfd function in the GNU Binutils development toolset is related to the use of a null pointer pointer when searching for STTTLS symbols, especially when TLS sections are not present. Exploiting this vulnerability can allow an attacker to cause a service failure...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the bfdaddmergesection function in the GNU Binutils development environment is related to the assignment of a null pointer when attempting to merge sections with large differences. Exploiting this vulnerability could allow an attacker to trigger a service failure...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-1019)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library CVE-2018-7568 - binutils: integer underflow...