CVE-2017-9044

The printsymbolforbuildattribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service invalid read and SEGV via a crafted ELF file...

CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-9044

Technical details for CVE-2017-9044 are not provided in the connected documents. The initial description notes a denial of service via crafted ELF in Binutils, but no concrete affected versions or fixes are given here. Monitor for updates.

CVE-2017-9043: Improper Input Validation

readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...

CVE-2017-9042: Incorrect Type Conversion or Cast

readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...

CVE-2017-9041: Out-of-bounds Read

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-9040: NULL Pointer Dereference

GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service NULL pointer dereference and application crash, related to the processmipsspecific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt...

CVE-2017-9039: Allocation of Resources Without Limits or Throttling

GNU Binutils 2.28 allows remote attackers to cause a denial of service memory consumption via a crafted ELF file with many program headers, related to the getprogramheaders function in readelf.c...

CVE-2017-9038: Out-of-bounds Read

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to the bytegetlittleendian function in elfcomm.c, the getunwindsectionword function in readelf.c, and ARM unwind information that contains inval...

CVE-2017-9044: Out-of-bounds Read

The printsymbolforbuildattribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service invalid read and SEGV via a crafted ELF file...

PT-2017-18662

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by utilizing a crafted ELF file that contains many program headers. This is related to the get program heade...

PT-2017-18667

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-12 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid read and SEGV, via a crafted ELF file. This is due to a problem in the print symbol for build attribute functio...

PT-2017-18661

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted ELF file. This is related to the byte get little endian...

PT-2017-18666

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-12 Description The issue in readelf.c might allow remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted ELF file...

PT-2017-18665

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-12 Description The issue in readelf.c might allow remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted ELF file...

PT-2017-18663

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-03 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This is related to the process mips specific function in readelf.c, whic...

PT-2017-18664

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, by providing a crafted ELF file. This is related to the mishandling of MIPS...

CVE-2017-8396

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that condu...

CVE-2017-8397

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing relocs with negative addresses. This vulnerability causes programs that conduct an...

CVE-2017-8394

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of bfdelflargecomsection. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library,...