CVE-2014-8504

Stack-based buffer overflow in the srecscan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted file...

UBUNTU-CVE-2014-8484

The srecscan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service out-of-bounds read via a small S-record...

CVE-2014-8503: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ihexscan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted ihex file...

CVE-2014-8737: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...

UBUNTU-CVE-2014-8737

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...

GNU binutils -- multiple vulnerabilities

US-CERT/NIST reports: The bfdXXiswapaouthdrin function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE...

[SECURITY] Fedora 19 Update: arm-none-eabi-binutils-cs-2014.05.28-3.fc19

This is a cross-compilation version of GNU Binutils, which can be used to assemble and link binaries for the arm-none-eabi platform. This Binutils package is based on the CodeSourcery 2014.05-28 release, which includes improved ARM target support compared to the corresponding FSF release...

[SECURITY] Fedora 19 Update: avr-binutils-2.24-3.fc19

This is a Cross Compiling version of GNU binutils, which can be used to assemble and link binaries for the avr platform, instead of for the native x8664 platform...

[SECURITY] Fedora 21 Update: avr-binutils-2.24-4.fc21

This is a Cross Compiling version of GNU binutils, which can be used to assemble and link binaries for the avr platform, instead of for the native arm platform...

[SECURITY] Fedora 20 Update: arm-none-eabi-binutils-cs-2014.05.28-3.fc20

This is a cross-compilation version of GNU Binutils, which can be used to assemble and link binaries for the arm-none-eabi platform. This Binutils package is based on the CodeSourcery 2014.05-28 release, which includes improved ARM target support compared to the corresponding FSF release...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

No description provided by source. Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool simply scans t...

vulnerabilities in libbfd (CVE-2014-beats-me)

Yo, Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool simply scans the file for runs of printable...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

Exploit for linux platform in category dos / poc Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

Binary File Descriptor Library libbfd - Out-of-Bounds Crash Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is tha...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool simply scans the file for runs of printable...

GNU BinUtils 2.1x GAS Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19555/info GNU binutils GAS GNU assembler is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Remote...

PT-2014-8564

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE...

PT-2014-8567

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description A stack-based buffer overflow issue exists in the srec scan function in bfd/srec.c, allowing remote attackers to cause a denial of service crash and possibly have other unspecified impact via ...

PT-2014-8565

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue is related to a heap-based buffer overflow in the pe print edata function, which can be triggered by a truncated export table in a PE file. This can cause a denial of service,...

PT-2014-8699

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue allows local users to delete arbitrary files or create arbitrary files via directory traversal vulnerabilities in GNU binutils. This can be achieved by using a .. dot dot or full pat...