PT-2020-6909

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.34 through 2.35 Description A Denial of Service issue exists in the Binary File Descriptor BFD due to an invalid read in the process symbol table function. This can allow an attacker to cause a denial of service...

PT-2020-6702

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.34 Description A use after free issue exists in the Binary File Descriptor BFD library, specifically in the bfd hash lookup function, which can cause a denial of service via a crafted file. This issue is demonstrated in...

PT-2020-6906

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.34 through 2.35 Description A double free vulnerability exists in the Binary File Descriptor BFD also known as libbrd in GNU Binutils. This issue is related to an error in the process symbol table function, as...

PT-2020-14872

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.34 Description A Null Pointer Dereference issue exists in the Binary File Descriptor BFD library, as distributed in GNU Binutils, in the debug get real type function, as demonstrated in objdump, that can cause a denial o...

Denial Of Service (DoS)

GNU binutils is vulnerable to denial of service attacks. A remote attacker could cause heap-based buffer overflow in the peprintedata function in bfd/peXXigen.c via a truncated export table in a PE file resulting in a system crash...

PT-2020-6735

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.36 Description The issue is related to insufficient input validation in the read section function of the dwarf2.c component in the GNU Binutils development tool. This allows a remote attacker to cause a denial of...

PT-2021-13876

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.35.1 Description: A flaw was found in GNU Binutils, where there is a heap-based buffer overflow in bfd elf slurp secondary reloc section in elf.c due to the number of symbols not calculated correctly. The highest threat...

The vulnerability of the libbfd library in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the libbfd library function elfreadnotes elf.c in the GNU Binutils development environment is related to the distribution of resources without restrictions. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.

Summary GNU Binutils is used by IBM Netezza Platform Software. IBM Netezza Platform Software has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-9070 DESCRIPTION: GNU Binutils is vulnerable to a heap-based buffer overflow, caused by a buffer over-read flaw in the dexpression1...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c, as demonstrated by nm...

Buffer Overflow

binutils:bionic is vulnerable to buffer overflow. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...

PT-2020-6907

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.35.1 Description A heap-based buffer over-read issue was discovered in the Binary File Descriptor BFD library, which can occur in bfd getl signed 32 in libbfd.c because sh entsize is not validated in bfd elf slurp...

An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.

...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c as demonstrated by nm.

...

Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers...

Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.

Summary GNU Binutils is used by IBM Netezza Platform Software. IBM Netezza Platform Software has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-17450 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an infinite recursion in findabstractinstance in...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1743)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : binutils (EulerOS-SA-2020-1743)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The bfdgenericreadminisymbols function in syms.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU...

USN-4336-1: GNU binutils vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU...