GNU Binutils Development Environment Confidential Data Access DoS

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

GNU Binutils Development Environment DoS

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created ELF file...

GNU Binutils Dwarf2 Heap Buffer Overflow DoS

The vulnerability of the bfddwarf2cleanupdebuginfo function in the dwarf2.c component of the GNU Binutils development environment is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows an attacker who operates remotely to...

GNU Binutils Dwarf Function Buffer Overflow DoS

The vulnerability of the displaydebugframes function in the dwarf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GNU Binutils elf_object_p Buffer Overflow DoS

The vulnerability of the elfobjectp function in the bfd/elfcode.h component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause service failures remotely...

libiberty simple-object-elf Heap Buffer Overflow DoS

The vulnerability of the simpleobjectelfmatch function in the libiberty/simple-object-elf.c development tool of the GNU Binutils library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the bfdelfparseattributes function in the elf-attrs.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows an attacker to cause service failures through a specially created EL...

GNU Binutils aoutx.h Heap Buffer Overflow DoS

The vulnerability of the aoutgetexternalsymbols function in the aoutx.h component of the GNU Binutils development environment is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the bfdelfparseattributes function in the elf-attrs.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created ELF file...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the dname, dencoding, and dlocalname functions in the cp-demangle.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker who operates remotely to trigge...

bfd/elf.c Buffer Overflow DoS

The vulnerability of the bfdsectionfromshdr function in the bfd/elf.c component of the GNU Binutils development environment is related to insufficient input validation. Exploiting this vulnerability allows an attacker to cause service failures remotely...

GNU Binutils Development Environment Buffer Overflow DoS

The vulnerability of the bfdgetdebuglinkinfo1 function in the opncls.c component of the GNU Binutils development environment is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause a service failure through the use of a special...

GNU Binutils Dwarf Processdebug_info DoS

The vulnerability of the processdebuginfo function in the dwarf.c component of the GNU Binutils development environment is related to incorrect calculation of buffer size. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure using a specially created...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the dwarf2.c component in the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to trigger a service failure using a specially created ELF file...

GNU Binutils Dwarf2 C Buffer Overflow DoS

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

GNU Binutils read_formatted_entries Heap Buffer Overflow DoS

The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially...

Rocky Linux 8 : binutils (RLSA-2023:6236)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:6236 advisory. - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of...

CLSA-2023-1699380309 Fix CVE(s): CVE-2022-48063

SECURITY UPDATE: fix an attempt to allocate an unreasonably large amount of memory when parsing a corrupt ELF file - debian/patches/CVE-2022-48063.patch: Check for excessively large sections - CVE-2022-48063...

Advisory ROSA-SA-2023-2291

Software: gdb 8.2 OS: ROSA Virtualization 2.1 packageevrstring: gdb-8.2-19.rv3.src.rpm CVE-ID: CVE-2019-1010180 BDU-ID: 2019-03222 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the gdb module of the GDB debugger is related to an operation exceeding buffer boundaries in memory. Exploitation of the...

SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities

The Pakistan-linked threat actor known as SideCopy has been observed leveraging the recent WinRAR security vulnerability in its attacks targeting Indian government entities to deliver various remote access trojans such as AllaKore RAT, Ares RAT, and DRat. Enterprise security firm SEQRITE describe...