Alert: OracleIV DDoS Botnet Targets Public Docker Engine APIs to Hijack Containers

Publicly-accessible Docker Engine API instances are being targeted by threat actors as part of a campaign designed to co-opt the machines into a distributed denial-of-service DDoS botnet dubbed OracleIV. "Attackers are exploiting this misconfiguration to deliver a malicious Docker container, buil...

The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows a malicious actor to cause service failures through...

The vulnerability of the _bfd_elf_parse_attributes function in the elf-attrs.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdelfparseattributes function in the elf-attrs.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created ELF file...

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

The vulnerability of the _bfd_dwarf2_cleanupdebug_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the bfddwarf2cleanupdebuginfo function in the dwarf2.c component of the GNU Binutils development environment is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows an attacker who operates remotely to...

The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

The vulnerability of the `aout_get_external_symbols` function in the `aoutx.h` component of the GNU Binutils development environment allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the aoutgetexternalsymbols function in the aoutx.h component of the GNU Binutils development environment is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

The vulnerabilities of the d_name, d_encoding, and d_local_name functions in the cp-demangle.c component of the GNU Binutils development environment allow a attacker to cause a service failure.

The vulnerability of the dname, dencoding, and dlocalname functions in the cp-demangle.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker who operates remotely to trigge...

The vulnerability of the IS_CONTAINED_BY_LMA macro in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the ISCONTAINEDBYLMA macro in the bfd/elf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the elf_object_p function in the bfd/elfcode.h component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the elfobjectp function in the bfd/elfcode.h component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the processdebug_info function in the dwarf.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the processdebuginfo function in the dwarf.c component of the GNU Binutils development environment is related to incorrect calculation of buffer size. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure using a specially created...

The vulnerability of the `find_abstract_instance` function in the `bfd/dwarf2.c` component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the findabstractinstance function in the bfd/dwarf2.c component of the GNU Binutils development environment is related to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created ELF file...

The vulnerability of the bfd_section_from_shdr function in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdsectionfromshdr function in the bfd/elf.c component of the GNU Binutils development environment is related to insufficient input validation. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the `simple_object_elf_match` function in the `libiberty/simple-object-elf.c` development toolset of the GNU Binutils allows a attacker to trigger a service failure.

The vulnerability of the simpleobjectelfmatch function in the libiberty/simple-object-elf.c development tool of the GNU Binutils library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the bfd_getdebug_link_info_1 function in the opncls.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdgetdebuglinkinfo1 function in the opncls.c component of the GNU Binutils development environment is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause a service failure through the use of a special...

The vulnerability of the _bfd_elf_parse_attributes function in the elf-attrs.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdelfparseattributes function in the elf-attrs.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows an attacker to cause service failures through a specially created EL...

The vulnerability of the dwarf2.c component in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the dwarf2.c component in the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to trigger a service failure using a specially created ELF file...

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

The vulnerability of the `read_formatted_entries` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially...

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created ELF file...