CVE-2018-19932

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the ISCONTAINEDBYLMA macro in elf.c...

CVE-2018-19931

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not restricted...

CVE-2018-19932

CVE-2018-19932 affects GNU Binutils libbfd. The issue is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c. Public docs describe it as a vulnerability in binutils through 2.31 with potential stability/denial effects; remediation quoted in connected sources is ...

CVE-2018-19932: Integer Overflow or Wraparound

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the ISCONTAINEDBYLMA macro in elf.c...

CVE-2018-19931: Out-of-bounds Write

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not restricted...

GNU Binutils Binary File Descriptor library Integer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

GNU Binutils Binary File Descriptor library Heap Buffer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

PT-2018-2625

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.31.1 Description The issue is related to an integer overflow vulnerability in the load specific debug section function in objdump.c, which can trigger a heap-based buffer overflow via a crafted section size. Thi...

PT-2018-2592

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31 Description The issue is related to a memory leak in the bfd generic read minisymbols function, located in the syms.c file of the Binary File Descriptor BFD library, which is part of the GNU Binutils package. This...

Scientific Linux Security Update : binutils on SL7.x x86_64 (20181030)

Security Fixes : - binutils: Improper bounds check in coffgen.c:coffpointerizeaux allows for denial of service when parsing a crafted COFF file CVE-2018-7208 - binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library CVE-2018-7568 - binutils: integer...

PT-2018-2624

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31.1 Description A NULL pointer dereference was discovered in the elf link add object symbols function in the Binary File Descriptor BFD library, which is part of GNU Binutils. This issue occurs when processing a special...

GLSA-201811-17 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201811-17 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review the referenced CVE identifiers for details. Impact : A remote attacker, by enticing a user to compile/execute a...

Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review the referenced CVE...

PT-2018-3965

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.31 Description An issue in the Binary File Descriptor BFD library, specifically in the elf.c component, is related to the IS CONTAINED BY LMA macro. This issue causes an integer overflow and an infinite loop. Th...

PT-2018-2454

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.31 Description An issue was discovered in the Binary File Descriptor BFD library, which is part of GNU Binutils. The problem is a heap-based buffer overflow in the bfd elf32 swap phdr in function, located in...

CentOS 7 : binutils (CESA-2018:3032)

An update for binutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

binutils security update

CentOS Errata and Security Advisory CESA-2018:3032 An update for binutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Oracle Linux 7 : binutils (ELSA-2018-3032)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3032 advisory. 2.27-34.base.0.1 - Backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R386GOT32/R386GOT32X IFUNC reloc error Orabug...

binutils security, bug fix, and enhancement update

2.27-34.base.0.1 - Backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R386GOT32/R386GOT32X IFUNC reloc error Orabug 27930573 2.27-34.base - Fix seg-fault parsing corrupt AOUT format files. 1579799 - Fix seg-fault parsing corrupt DWARF2 debug information. 1579802 -...

GNU Binutils Stack Depletion Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for working with target files and archives. libiberty is one of the librarie...