5230 matches found
Samsung Mobile Devices Unspecified Vulnerability
Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP...
beeldbank.de-elf-rotten.nl Cross Site Scripting vulnerability OBB-3448268
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
EulerOS Virtualization 2.11.1 : binutils (EulerOS-SA-2023-2054)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-3812...
Feeding Gophers to Ghidra
Feeding Gophers to Ghidra By Trellix Ā· June 6, 2023 This blog was written by Max Kersten The scripts discussed in the article are based on the magnificent work ofDorka Palotay from CUJOai. Golang malware is becoming increasingly prevalent, requiring analysts to know how to effectively analyze the...
Predator Android Spyware: Researchers Uncover New Data Theft Capabilities
Security researchers have detailed the inner workings of the commercial Android spyware called Predator, which is marketed by the Israeli company Intellexa previously Cytrox. Predator was first documented by Google's Threat Analysis Group TAG in May 2022 as part of attacks leveraging five differe...
gcc-toolset-12-binutils security update
2.38-17 - Fix an illegal memory access parsing a corrupt ELF file. 2153220...
Oracle Linux 8 : gcc-toolset-12-binutils (ELSA-2023-2873)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2873 advisory. 2.38-17 - Fix an illegal memory access parsing a corrupt ELF file. 2153220 Tenable has extracted the preceding description block directly from the Oracle Linux...
binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...
AlmaLinux 8 : gcc-toolset-12-binutils (ALSA-2023:2873)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2873 advisory. - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of...
CVE-2023-1972
CVE-2023-1972 is a memory corruption issue in GNU Binutils. The initial description confirms a potential heap-based buffer overflow in _bfd_elf_slurp_version_tables() within bfd/elf.c, which may lead to loss of availability. Connected documents specify affected package family as binutils and note...
binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...
New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems
A new ransomware-as-service RaaS operation called MichaelKors has become the latest file-encrypting malware to target Linux and VMware ESXi systems as of April 2023. The development points to cybercriminal actors increasingly setting their eyes on the ESXi, cybersecurity firm CrowdStrike said in ...
Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi Systems
Multiple threat actors have capitalized on the leak of Babuk aka Babak or Babyk ransomware code in September 2021 to build as many as nine different ransomware families capable of targeting VMware ESXi systems. "These variants emerged through H2 2022 and H1 2023, which shows an increasing trend o...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1755)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-1777)
According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result i...
USN-6036-1: PatchELF vulnerability
It was discovered that PatchELF was not properly performing bounds checks, which could lead to an out-of-bounds read via a specially crafted file. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. CVE-2022-44940...
The vulnerability of the `elf_parser::ElfParser::get_segments` function in the `elf_parser.cpp` component of the elf file analysis software `elf-parser`, due to insufficient input validation, allows a perpetrator to cause service interruptions.
The vulnerability of the elfparser::ElfParser::getsegments function in the elfparser.cpp component of the elf file analysis software, elf-parser, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
SUSE CVE-2023-1972
A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...
UBUNTU-CVE-2023-1972
A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...
GNU Binutils Buffer Overflow Vulnerability
GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. A buffer overflow vulnerability exists in GNU Binutils, which stems from a...