CVE-2017-12450

CVE-2017-12450 concerns the GNU Binutils libbfd component, specifically the alpha_vms_object_p path in vms-alpha.c. The advisory text in the connected sources confirms an out-of-bounds heap write vulnerability exploitable via crafted vms alpha files, which could lead to code execution. The affect...

CVE-2017-12458

CVE-2017-12458 affects GNU Binutils libbfd (nlm_swap_auxiliary_headers_in in bfd/nlmcode.h). As distributed in Binutils 2.29 and earlier, it allows a remote attacker to cause an out-of-bounds heap read via a crafted nlm file. The vulnerability is tied to the nlm_swap_auxiliary_headers_in routine ...

CVE-2017-12457

CVE-2017-12457 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils, with the vulnerable code path in section.c::bfd_make_section_with_flags. The issue allows a crafted file to trigger a NULL pointer dereference and crash the process, as distributed in Binutils 2.29 and earli...

CVE-2017-12455

The evaxbfdprintemh function in vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file...

CVE-2017-12455

The evaxbfdprintemh function in vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file...

CVE-2017-12454

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

CVE-2017-12449

CVE-2017-12449 affects the GNU Binutils libbfd component. The vulnerability exists in _bfd_vms_save_sized_string (vms-misc.c) and allows a remote attacker to trigger an out-of-bounds heap read by supplying a crafted vms file. The CVE is associated with Binutils 2.29 and earlier; newer versions ar...

CVE-2017-12454

CVE-2017-12454 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils up to version 2.29. The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c can be triggered by a crafted VMS Alpha file to cause an arbitrary memory read. This entry (CVE-2017-12454) is corroborated by connected...

CVE-2017-12451

The bfdxcoffreadarhdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a crafted COFF image file...

CVE-2017-12457

The bfdmakesectionwithflags function in section.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file...

CVE-2017-12452

The bfdmachoi386canonicalizeonereloc function in bfd/mach-o-i386.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file...

CVE-2017-12457

The bfdmakesectionwithflags function in section.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file...

CVE-2017-12458

The nlmswapauxiliaryheadersin function in bfd/nlmcode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file...

GNU Binutils Heap Buffer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A heap buffer overflow vulnerability...

CVE-2017-9954

The getvalue function in tekhex.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service stack-based buffer over-read and application crash via a crafted tekhex file, as demonstrated by mishandling within the...

CVE-2017-9753

The versadosmkobject function in bfd/versados.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly hav...

CVE-2017-9752

bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling...

CVE-2017-9748

The ieeeobjectp function in bfd/ieee.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as...

CVE-2017-9747

The ieeearchivep function in bfd/ieee.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, a...

CVE-2017-9744

The shelfsetmachfromflags function in bfd/elf32-sh.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary...