CVE-2020-16592: Use After Free

A use after free issue exists in the Binary File Descriptor BFD library aka libbfd in GNU Binutils 2.34 in bfdhashlookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file...

GNU Binutils code-related vulnerabilities

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives. A...

GNU Binutils Code Problem Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

CVE-2020-16593: NULL Pointer Dereference

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35, in scanunitforsymbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file...

GNU Binutils Code Problem Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

CVE-2020-16590: Double Free

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

GNU Binutils Resource Management Error Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

PT-2020-14872

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.34 Description A Null Pointer Dereference issue exists in the Binary File Descriptor BFD library, as distributed in GNU Binutils, in the debug get real type function, as demonstrated in objdump, that can cause a denial o...

Denial Of Service (DoS)

GNU binutils is vulnerable to denial of service attacks. A remote attacker could cause heap-based buffer overflow in the peprintedata function in bfd/peXXigen.c via a truncated export table in a PE file resulting in a system crash...

PT-2020-6735

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.36 Description The issue is related to insufficient input validation in the read section function of the dwarf2.c component in the GNU Binutils development tool. This allows a remote attacker to cause a denial of...

PT-2021-13876

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.35.1 Description: A flaw was found in GNU Binutils, where there is a heap-based buffer overflow in bfd elf slurp secondary reloc section in elf.c due to the number of symbols not calculated correctly. The highest threat...

libbfd DoS

The vulnerability of the libbfd library function elfreadnotes elf.c in the GNU Binutils development environment is related to the distribution of resources without restrictions. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.

Summary GNU Binutils is used by IBM Netezza Platform Software. IBM Netezza Platform Software has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-9070 DESCRIPTION: GNU Binutils is vulnerable to a heap-based buffer overflow, caused by a buffer over-read flaw in the dexpression1...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c, as demonstrated by nm...

Buffer Overflow

binutils:bionic is vulnerable to buffer overflow. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...

PT-2020-6907

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.35.1 Description A heap-based buffer over-read issue was discovered in the Binary File Descriptor BFD library, which can occur in bfd getl signed 32 in libbfd.c because sh entsize is not validated in bfd elf slurp...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c as demonstrated by nm.

...

An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.

...

Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers...