CVE-2019-9077

An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in processmipsspecific in readelf.c via a malformed MIPS option section...

PT-2019-6368

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to a heap-based buffer overflow in the process mips specific function of the readelf.c component in GNU Binutils. This can be exploited by a remote attacker using a specially crafted...

PT-2019-5659

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to the libbfd library, specifically the elf read notes function in elf.c, and is associated with unbounded resource allocation. Exploitation of this issue may allow an attacker to caus...

PT-2019-6400

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to an out-of-bounds read in the Binary File Descriptor BFD library, specifically in the bfd getl32 function within libbfd.c, which is called from pex64 get runtime function in pei-x86...

PT-2019-1519

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is a heap-based buffer overflow in the bfd archive 64 bit slurp armap function, located in archive64.c, which is part of the Binary File Descriptor BFD library. This can be exploited by a remote...

PT-2019-6399

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to the bfd elf slurp version tables function in the elf.c component of the GNU Binutils, which is associated with unlimited memory allocation. This allows a remote attacker to cause a...

PT-2019-6366 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.32 Description: The issue is a heap-based buffer over-read in the d expression 1 function in cp-demangle.c after many recursive calls. This can allow a remote attacker to access confidential data, compromise data...

PT-2019-6367

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to a stack consumption problem in the d count templates scopes function within cp-demangle.c of the GNU libiberty component, which is part of GNU Binutils. This problem occurs after ma...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the secmergehashlookup function in the GNU Binutils development tooling is related to improper checking of memory access boundaries, which can lead to reading beyond the buffer’s bounds, especially when the size of a segment is not a multiple of the size of a single record...

GNU Binutils Recursive Call DoS

The vulnerability of the GNU Binutils development tooling is related to the unlimited recursive execution of a set of functions demanglenestedargs, demangleargs, doarg, and dotype from the cplus-dem.c file. Exploiting this vulnerability could allow an attacker to trigger a service failure...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the GNU Binutils development tool is related to a numerical overflow of the loadspecific DebugSection function in objdump.c, which results in the allocation of zero-sized memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the assignfilepositionsfornonloadsections function in the GNU Binutils development environment is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by using an ELF file with a RELRO segment that lacks...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the swapstdrelocin function in the GNU Binutils development environment is related to the swapping of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

GNU Binutils parse_die Buffer Overflow DoS

The vulnerability of the parsedie function in the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure through an ELF file with corrupted debugging information in dwarf1...

GNU Binutils parse_die Buffer Overflow DoS

The vulnerability of the parsedie function in the GNU Binutils development toolset is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by using an ELF file with a corrupted DWARF FORM block...

GNU Binutils Displaydebug_ranges DoS

The vulnerability of the displaydebugranges function in the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

GNU Binutils Buffer Overflow DoS

The vulnerability of the bfdgetdebuglinkinfo1 function in the GNU Binutils development toolset is related to the lack of checks for the result of the strnlen function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2018-20712

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

CVE-2018-20712

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

Heap overflow

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...