Lucene search
K

258 matches found

BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.0 views

The vulnerability of the `find_abstract_instance_name` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the findabstractinstancename function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service...

7.8CVSS0.00425EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.1 views

The vulnerability of the `apply_relocations` function in the `binutils/readelf.c` component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the applyrelocations function in the binutils/readelf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially create...

7.8CVSS0.00421EPSS
Exploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.1 views

The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF...

7.8CVSS0.02994EPSS
Exploits3References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.1 views

The vulnerability of the _bfd_elf_slurp_version_tables function in the elf.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the bfdelfslurpversiontables function in the elf.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

7.8CVSS0.00499EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.2 views

The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created...

7.8CVSS0.00367EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.1 views

The vulnerability of the _bfd_stab_section_find_nearest_line function in the syms.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdstabsectionfindnearestline function in the syss.c component of the GNU Binutils development environment is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to trigger a service failur...

7.8CVSS0.00447EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.1 views

The vulnerability of the bfd_zalloc function in the opncls.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdzalloc function in the opncls.c component of the GNU Binutils development environment is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a...

7.8CVSS0.00314EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.1 views

The vulnerability in the `print_gnu_property_note` function of the `readelf.c` component of the GNU Binutils development environment allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the printgnupropertynote function in the readelf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS0.00257EPSS
Exploits1References7Affected Software2
SUSE CVE
SUSE CVE
added 2023/08/26 8:8 a.m.1 views

SUSE CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

5.5CVSS7.6AI score0.00015EPSS
Exploits1References14
OSV
OSV
added 2023/08/22 7:16 p.m.2 views

AZL-28051 CVE-2022-48063 affecting package binutils for versions less than 2.37-10

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

5.5CVSS6.3AI score0.00015EPSS
Exploits1References1
OSV
OSV
added 2023/08/22 7:16 p.m.0 views

UBUNTU-CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

5.5CVSS6.1AI score0.00015EPSS
Exploits1References4
Prion
Prion
added 2023/03/16 12:15 p.m.18 views

Design/Logic Flaw

VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file...

4.3CVSS7.9AI score0.00065EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/16 12:0 a.m.16 views

CVE-2023-24671

VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file...

8.7AI score0.00065EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:18 a.m.3 views

SUSE CVE-2005-0749

The loadelflibrary in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service kernel crash via a crafted ELF library or executable, which causes a free of an invalid pointer...

7.2CVSS6.2AI score0.0005EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.1 views

SUSE CVE-2008-6680

libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service crash via a crafted EXE file that triggers a divide-by-zero error...

5CVSS6.8AI score0.04173EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:0 a.m.1 views

SUSE CVE-2010-0426

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...

6.9CVSS7.1AI score0.0076EPSS
Exploits2References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:6 a.m.3 views

SUSE CVE-2016-2091

The dwarfreadciefdeprefix function in dwarfframe2.c in libdwarf 20151114 allows attackers to cause a denial of service out-of-bounds read via a crafted ELF object file...

4.3CVSS6.7AI score0.00178EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:50 a.m.3 views

SUSE CVE-2017-5332

The extractgroupiconcursorresource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service process crash and execute arbitrary code via a crafted executable...

7.8CVSS7.4AI score0.00205EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:45 a.m.3 views

SUSE CVE-2017-9039

GNU Binutils 2.28 allows remote attackers to cause a denial of service memory consumption via a crafted ELF file with many program headers, related to the getprogramheaders function in readelf.c...

3.7CVSS7.3AI score0.00358EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:40 a.m.1 views

SUSE CVE-2017-13757

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to elfi386getsyntheticsymtab...

5.3CVSS6.8AI score0.00452EPSS
Exploits0References6
Rows per page
Query Builder