Rizin buffer error vulnerability

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a command-line hex editor that can open disk files that can be scripted, etc. Rizin 0.3.1 and earlier versions have a...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_putl32

Detailed Report: https://oss-fuzz.com/testcase?key=6425304699109376 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60600000005b Crash State: bfdputl32...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getl64

Detailed Report: https://oss-fuzz.com/testcase?key=5787882019749888 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000002c3 Crash State: bfdgetl64...

binutils:fuzz_addr2line: Heap-use-after-free in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5375653145346048 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x606000000021 Crash State: bfdgetl16 bfdmipselfgenericreloc...

ELFXtract - An Automated Analysis Tool Used For Enumerating ELF Binaries

ELFXtract is an automated analysis tool used for enumerating ELF binaries Powered by Radare2 and r2ghidra This is specially developed for PWN challenges and it has many automated features It almost displays every details of the ELF and also decompiles its ASM to C code using r2ghidra Decompiling...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getl64

Detailed Report: https://oss-fuzz.com/testcase?key=5611820908412928 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000002c3 Crash State: bfdgetl64...

Oracle Linux 8 : binutils (ELSA-2021-4364)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4364 advisory. 2.30-108.0.2 - Forward-port the following update: 2.30-93.0.4 - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps - Backport test...

PT-2021-6794

Name of the Vulnerable Software and Affected Versions Rizin versions up to and including 0.3.1 Description The issue is related to a heap-based out of bounds write in the parse die function when reversing an AMD64 ELF binary with DWARF debug info. This can cause Rizin to crash or execute unintend...

openSUSE: Security Advisory for binutils (openSUSE-SU-2021:1475-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for binutils (moderate)

openSUSE Security Update: Security update for binutils Announcement ID: openSUSE-SU-2021:1475-1 Rating: moderate References: 1179898 1179899 1179900 1179901 1179902 1179903 1180451 1180454 1180461 1181452 1182252 1183511 1183909 1184519 1184620 1184794 1188941 1191473 1192267 PM-2767 SLE-18637...

PT-2021-30968

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40908 Crash type: Heap-buffer-overflow READ 1 Crash state: bfd getl32 bfd mips elf section from shdr bfd section from shdr...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_putl32

Detailed Report: https://oss-fuzz.com/testcase?key=6319028142997504 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60600000005b Crash State: bfdputl32...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getl64

Detailed Report: https://oss-fuzz.com/testcase?key=5132579263610880 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000002c3 Crash State: bfdgetl64 bfdrelocatecontents...

binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=4871486322638848 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x608000000074 Crash State: bfdgetl32 bfdmipselfsectionfromshdr...

binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

file security update

An update is available for file. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The file command is used to identify a particular file according to the type of...

Moderate: file security update

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format ELF binary files, system libraries, RPM packages, and different graphics formats. Security Fixes: file:...

PT-2021-30966

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfd getl16 bfd mips elf reloc unshuffle bfd mips elf32 gprel16 reloc...

binutils:fuzz_addr2line: Segv on unknown address in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5092031333007360 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: bfdgetl16 bfdmipselfrelocunshuffle...