SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities

The Pakistan-linked threat actor known as SideCopy has been observed leveraging the recent WinRAR security vulnerability in its attacks targeting Indian government entities to deliver various remote access trojans such as AllaKore RAT, Ares RAT, and DRat. Enterprise security firm SEQRITE describe...

binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...

CVE-2023-28545

Memory corruption in TZ Secure OS while loading an app ELF...

Memory corruption

Memory corruption in TZ Secure OS while loading an app ELF...

CVE-2023-28545 Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS

Memory corruption in TZ Secure OS while loading an app ELF...

CVE-2023-28545

CVE-2023-28545 describes memory corruption in TZ Secure OS when loading an application ELF. Multiple sources confirm this is a local issue with high impact to confidentiality, integrity, and availability, per CVSS metrics (NVD). Exploitation is local and requires low attack complexity with low pr...

RHEL 9 : binutils (RHSA-2023:6593)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6593 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

CVE-2023-28545: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption in TZ Secure OS while loading an app ELF...

Fedora 39 : gdb (2023-89ade611ee)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-89ade611ee advisory. Backport upstream commit d28fbc7197b which fixes RHBZ 2233965, Security fix for CVE-2022-48065 ---- Security fix for CVE-2022-48064, Backport upstre...

AlmaLinux 8 : binutils (ALSA-2023:6236)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:6236 advisory. - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of...

binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...

Oracle Linux 8 : binutils (ELSA-2023-6236)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6236 advisory. - Fix for CVE-2022-4285. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

RHEL 8 : binutils (RHSA-2023:6236)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6236 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

CVE-2023-28796 IPC Bypass Through PLT Section in ELF

Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

SUSE-SU-2023:4110-1 Security update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaihinet bsc1215286, BZ 28931 Also a regression from a previous update was fixed: - elf: Align argument of munmap to page size bsc1215891, BZ 28676...

GNU Binutils Development Environment DNS Attack

The vulnerability of the loadseparatedebugfiles function in the GNU Binutils development toolset is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to trigger a DNS attack using a specially created ELF file...

GNU Binutils Development Environment DNS Attack

The vulnerability of the bfddwarf2findnearestlinewithalt function in the GNU Binutils development environment is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to trigger a DNS attack using a specially created ELF file...

ROS-20231013-05

Vulnerability of prfunctiontype function in prdbg.c file of GNU Binutils development tool is related to a memory leak. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service A vulnerability in the parsestabstructfields function of the GNU development tool...

binutils:fuzz_nm: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5047985349984256 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzznm Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000000295 Crash State: bfdgetl16 bfdmipselfrelocunshuffle...

GLSA-202309-15 : GNU Binutils: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-15 GNU Binutils: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GNU Binutils. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...