Lucene search
K

547 matches found

AstraLinux
AstraLinux
added 5 days ago3 views

Astra Linux – Vulnerability in binutils

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the processarchive function in readelf.c via a crafted ELF file...

5.5CVSS6.6AI score0.01825EPSS
Exploits1References2
AstraLinux
AstraLinux
added 5 days ago4 views

Astra Linux – Vulnerability in binutils

It has been discovered that GNU Binutils prior to version 2.40 contains a vulnerability involving excessive memory consumption, caused by the loadseparatedebugfiles function in dwarf2.c. An attacker could provide a crafted ELF file and trigger a DNS attack...

5.5CVSS5.3AI score0.00483EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.4 views

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2026-2236)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header...

7.5CVSS6.1AI score0.00256EPSS
Exploits2References3
NVD
NVD
added 2026/06/02 4:16 p.m.12 views

CVE-2026-45676

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI's replacement ELF parser trusts section offsets, counts, and string offsets from the executable file. A crafted local ELF can make OBI dereference invalid section...

5.5CVSS0.00162EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/06/02 3:23 p.m.36 views

CVE-2026-45676 OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI's replacement ELF parser trusts section offsets, counts, and string offsets from the executable file. A crafted local ELF can make OBI dereference invalid section...

5.5CVSS0.00162EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.8 views

Astra Linux - уязвимость в linux-astra-modules-5.10, linux-astra-modules-5.15, linux-astra-modules-6.1

The vulnerability of Linux Astra Modules relates to the provision of unlimited memory. Exploiting this vulnerability allows a hacker to trigger a service failure using a specially created elf file...

5.1CVSS5.8AI score
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.7 views

Astra Linux – Vulnerability in binutils

A issue was discovered in the Binary File Descriptor BFD library also known as libbfd, as distributed in GNU Binutils 2.31. An invalid memory access exists in bfdzalloc in opncls.c. Attackers could exploit this vulnerability to cause a denial of service application crash through a crafted ELF fil...

5.5CVSS6.2AI score0.01239EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.9 views

Astra Linux – Vulnerability in elfutils

The libcpu component, which is used by libasm of elftools version 0.177 git 47780c9e, suffers from denial-of-service vulnerabilities caused by application crashes due to out-of-bounds write CWE-787, off-by-one errors CWE-193, and reachable assertions CWE-617. To exploit these vulnerabilities,...

5.5CVSS6.6AI score0.00226EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.9 views

Astra Linux – Vulnerability in binutils

A heap-based buffer overflow issue was discovered in the secmergehashlookup function in merge.c within the Binary File Descriptor BFD library also known as libbfd, as part of the GNU Binutils 2.31. This issue arises due to bfdaddmergesection improperly handling section merges when the size is not...

5.5CVSS6.6AI score0.02331EPSS
Exploits1References2
OSV
OSV
added 2026/05/03 9:56 a.m.3 views

OESA-2026-2152 binutils security update

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

5CVSS5.7AI score0.00126EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/04/23 1:28 a.m.4 views

SUSE CVE-2026-6844

A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service DoS vulnerabilities by providing a specially crafted Executable and Linkable Format ELF file. One vulnerability, a resource exhaustion CWE-400, can lead to an out-of-memory...

5.5CVSS5.7AI score0.00104EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/22 9:31 a.m.4 views

EUVD-2026-24710

A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service DoS vulnerabilities by providing a specially crafted Executable and Linkable Format ELF file. One vulnerability, a resource exhaustion CWE-400, can lead to an out-of-memory...

5.5CVSS5.7AI score0.00104EPSS
Exploits0References3
NVD
NVD
added 2026/04/22 9:16 a.m.3 views

CVE-2026-6844

A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service DoS vulnerabilities by providing a specially crafted Executable and Linkable Format ELF file. One vulnerability, a resource exhaustion CWE-400, can lead to an out-of-memory...

5.5CVSS0.00104EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/22 8:37 a.m.2 views

CVE-2026-6844

A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service DoS vulnerabilities by providing a specially crafted Executable and Linkable Format ELF file. One vulnerability, a resource exhaustion CWE-400, can lead to an out-of-memory...

5.5CVSS5.7AI score0.00104EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/22 8:37 a.m.2 views

CVE-2026-6844

A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service DoS vulnerabilities by providing a specially crafted Executable and Linkable Format ELF file. One vulnerability, a resource exhaustion CWE-400, can lead to an out-of-memory...

5.5CVSS5.8AI score0.00104EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/22 8:37 a.m.41 views

CVE-2026-6844 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service DoS vulnerabilities by providing a specially crafted Executable and Linkable Format ELF file. One vulnerability, a resource exhaustion CWE-400, can lead to an out-of-memory...

5.5CVSS0.00104EPSS
Exploits0References2
CVE
CVE
added 2026/04/22 8:37 a.m.21 views

CVE-2026-6844

CVE-2026-6844 affects the readelf utility in the binutils package. A crafted ELF file can trigger two DoS conditions: (1) resource exhaustion leading to out-of-memory and (2) a null pointer dereference causing a segmentation fault. Both can render readelf unresponsive or crash, resulting in denia...

5.5CVSS5.7AI score0.00104EPSS
Exploits0References2Affected Software4
Vulnrichment
Vulnrichment
added 2026/04/22 7:54 a.m.3 views

CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file

A flaw was found in binutils, specifically within the readelf utility. This vulnerability allows a local attacker to cause a Denial of Service DoS by tricking a user into processing a specially crafted Executable and Linkable Format ELF file. The exploitation of this flaw can lead to the system...

5CVSS5.7AI score0.00126EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/22 7:54 a.m.3 views

CVE-2026-6845

A flaw was found in binutils, specifically within the readelf utility. This vulnerability allows a local attacker to cause a Denial of Service DoS by tricking a user into processing a specially crafted Executable and Linkable Format ELF file. The exploitation of this flaw can lead to the system...

5CVSS5.7AI score0.00126EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.5 views

PT-2026-34311

Name of the Vulnerable Software and Affected Versions binutils affected versions not specified Description A flaw in the readelf utility allows a local attacker to cause a Denial of Service DoS by tricking a user into processing a specially crafted Executable and Linkable Format ELF file. This ca...

5CVSS5.8AI score0.00126EPSS
Exploits0References13
Rows per page
Query Builder