CVE-2017-9743

The CVE-2017-9743 issue affects GNU Binutils 2.28. The vulnerability exists in the print_insn_score32 function (opcodes/score7-dis.c:552) and can be triggered by handling of a crafted binary file during objdump -D. Successful exploitation may lead to a denial of service via a buffer overflow and ...

CVE-2017-9752

CVE-2017-9752 affects GNU Binutils 2.28 (BFD libbfd) with a vulnerability in bfd/vms-alpha.c (_bfd_vms_get_value and _bfd_vms_slurp_etir) when handling crafted VMS binary files during objdump -D. It can cause a denial of service via a buffer overflow with potential for unspecified impact. The con...

CVE-2017-9744

Technical details for CVE-2017-9744 are not publicly available in the provided documents; monitor for updates.

CVE-2017-9753

CVE-2017-9753 concerns the GNU Binutils libbfd component. The versados_mkobject function (in bfd/versados.c) of Binutils 2.28 does not initialize a certain data structure, which the source describes as enabling a denial of service via a crafted binary when interpreting it with objdump -D. The vul...

CVE-2017-9742

The scoreopcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D"...

CVE-2017-9747

The ieeearchivep function in bfd/ieee.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, a...

CVE-2017-9746

The disassemblebytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during...

CVE-2017-9751

opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during...

CVE-2017-9751

CVE-2017-9751 concerns opcodes/rl78-decode.opc in GNU Binutils 2.28, where an unbounded GETBYTE macro can enable a crafted binary to trigger a buffer overflow during objdump -D, leading to a denial of service (application crash). The connected documents confirm this specific vector is tied to Bin...

CVE-2017-9749

CVE-2017-9749 affects GNU Binutils 2.28. the vulnerable component is the regs macros in opcodes/bfin-dis.c. A crafted binary can be mishandled during objdump -D, causing a buffer overflow that may crash the application and potentially lead to unspecified impact. The description notes a remote att...

CVE-2017-9751

opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during...

CVE-2017-9753

The versadosmkobject function in bfd/versados.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly hav...

CVE-2017-9748

Technical details for CVE-2017-9748 are not provided in the connected documents. No explicit affected product versions, exploitation status, or fixes are shown here; monitor for updates from vendors and security advisories.

CVE-2017-9756

The aarch64extldstreglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during...

PT-2017-19150

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, potentially leading to a buffer overflow and application crash, or possibly having other unspecified impacts. This can be achieved through a...

GNU binutils - bfd_get_string Stack Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21581 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

CVE-2017-9753: Improper Restriction of Operations within the Bounds of a Memory Buffer

The versadosmkobject function in bfd/versados.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly hav...

GNU binutils - rx_decode_opcode Buffer Overflow

GNU binutils - rxdecodeopcode Buffer Overflow Source: https://sourceware.org/bugzilla/showbug.cgi?id=21587 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

CVE-2017-9748: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ieeeobjectp function in bfd/ieee.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as...

GNU binutils - decode_pseudodbg_assert_0 Buffer Overflow

GNU binutils - decodepseudodbgassert0 Buffer Overflow Source: https://sourceware.org/bugzilla/showbug.cgi?id=21586 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is...