CVE-2017-12455: Out-of-bounds Read

The evaxbfdprintemh function in vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file...

CVE-2017-12456: Out-of-bounds Read

The readsymbolstabsdebugginginfo function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file...

CVE-2017-12459: Out-of-bounds Write

The bfdmachoreadsymtabstrtab function in bfd/mach-o.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file...

CVE-2017-12449: Out-of-bounds Read

The bfdvmssavesizedstring function in vms-misc.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file...

CVE-2017-12450: Out-of-bounds Write

The alphavmsobjectp function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file...

CVE-2017-12454: Out-of-bounds Read

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

PT-2017-4271

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd vms save sized string function in the vms-misc.c component of the Binary File Descriptor BFD library, which allows remote attackers to cause an out of bounds...

PT-2017-4280

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the nlm swap auxiliary headers in function in the bfd/nlmcode.h component of the Binary File Descriptor BFD library. It allows remote attackers to cause an out of...

PT-2017-4277

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the evax bfd print emh function in the vms-alpha.c component of the Binary File Descriptor BFD library, which allows remote attackers to cause an out of bounds heap...

PT-2017-4279

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd make section with flags function in the section.c component of the GNU Binutils library. It allows remote attackers to cause a NULL dereference via a crafted...

PT-2017-4281

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd mach o read symtab strtab function in the bfd/mach-o.c component of the GNU Binutils library. It allows remote attackers to cause an out of bounds heap write,...

PT-2017-4275

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd vms slurp eeom function in libbfd.c of the Binary File Descriptor BFD library, which allows remote attackers to cause an out of bounds heap read via a crafted...

PT-2017-4274

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd mach o i386 canonicalize one reloc function in the bfd/mach-o-i386.c component of the GNU Binutils, which allows remote attackers to cause an out of bounds he...

PT-2017-4272

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the alpha vms object p function in the bfd/vms-alpha.c component of GNU Binutils, which is associated with a buffer overflow. This allows a remote attacker to access...

PT-2017-4278

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the read symbol stabs debugging info function in the rddbg.c component of GNU Binutils, which is associated with reading beyond the boundaries of a data buffer. This...

PT-2017-4276

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd vms slurp egsd function in the bfd/vms-alpha.c component of the GNU Binutils library. It allows remote attackers to cause an arbitrary memory read via a craft...

GNU Binutils Heap Buffer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A heap buffer overflow vulnerability...

PT-2017-4273

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd xcoff read ar hdr function in the BFD library, which is part of GNU Binutils. This function has a buffer data reading issue that allows an out of bounds stack...

PT-2017-4270

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.29 and earlier Description The issue is related to the bfd cache close function in the Binary File Descriptor BFD library, which allows remote attackers to cause a heap use after free and possibly achieve code execution...

CVE-2017-9954

The getvalue function in tekhex.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service stack-based buffer over-read and application crash via a crafted tekhex file, as demonstrated by mishandling within the...