CVE-2017-6969

CVE-2017-6969 affects readelf in GNU Binutils 2.28, describing a heap-based buffer over-read when processing corrupt RL78 binaries. Impact per sources: crashes and potential information leakage. Connected advisories (e.g., RH unpatched BINUTILS entries) list CVE-2017-6969 among vulnerabilities wi...

CVE-2017-6966

readelf in GNU Binutils 2.28 has a use-after-free specifically read-after-free error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations...

CVE-2017-6965

readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow...

PT-2017-17431

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is caused by a use-after-free error, specifically a read-after-free, when processing multiple relocated sections in an MSP430 binary. This error occurs due to the mishandling of an invalid symbol...

PT-2017-17433

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to a heap-based buffer over-read in readelf when processing corrupt RL78 binaries. This can cause program crashes and potentially lead to an information leak. Recommendations For GNU...

CVE-2017-6966: Use After Free

readelf in GNU Binutils 2.28 has a use-after-free specifically read-after-free error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations...

CVE-2017-6965: Improper Restriction of Operations within the Bounds of a Memory Buffer

readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow...

CVE-2017-6969: Out-of-bounds Read

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...

PT-2017-17430

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue arises when readelf in GNU Binutils processes corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow due to writing to illegal addresses...

GNU binutils bfd/archive.c file do_slurp_bsd_armap function denial of service vulnerability

GNU binutils is a binary toolset for performing basic binary file operations. GNU binutils-2.23 and previous versions of doslurpbsdarmap in the bfd/archive.c file failed to adequately detect parsedsize, resulting in an integer overflow, bypassing exception-checking code, out-of-bounds accesses, a...

PT-2017-6412

Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.26 Description The issue is related to a stack buffer overflow that occurs when printing bad bytes in Intel Hex objects. This is due to a problem in the ihex.c file. Recommendations For GNU Binutils versions...

CVE-2005-4808

Buffer overflow in resetvars in config/tc-crx.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file...

CVE-2005-4807

Stack-based buffer overflow in the asbad function in messages.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code...

GNU Binutils Detection (Linux/Unix SSH Login)

Detects the installed version of GNU Binutils. The script tries to enumerate the installed Binutils versions from various previously found binaries included in this suite. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

FreeBSD : GNU binutils -- multiple vulnerabilities (f6a014cd-d268-11e4-8339-001e679db764)

US-CERT/NIST reports : The bfdXXiswapaouthdrin function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE...

Ubuntu 14.04 LTS : GNU binutils vulnerabilities (USN-2496-1)

"The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2496-1 advisory. Michal Zalewski discovered that the setupgroup function in libbfd in GNU binutils did not properly check group headers in ELF files. An attacker could u...

USN-2496-1: GNU binutils vulnerabilities

Michal Zalewski discovered that the setupgroup function in libbfd in GNU binutils did not properly check group headers in ELF files. An attacker could use this to craft input that could cause a denial of service application crash or possibly execute arbitrary code. CVE-2014-8485 Hanno Böck...

USN-2496-1 binutils vulnerabilities

Michal Zalewski discovered that the setupgroup function in libbfd in GNU binutils did not properly check group headers in ELF files. An attacker could use this to craft input that could cause a denial of service application crash or possibly execute arbitrary code. CVE-2014-8485 Hanno Böck...

Mandriva Linux Security Advisory : binutils (MDVSA-2015:029-1)

Multiple vulnerabilities has been found and corrected in binutils : Multiple integer overflows in the 1 objallocalloc function in objalloc.c and 2 objallocalloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service crash via...

CVE-2014-8738

The bfdslurpextendednametable function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service invalid write, segmentation fault, and crash via a crafted extended name table in an archive...