[SECURITY] Fedora 21 Update: avr-binutils-2.24-4.fc21

This is a Cross Compiling version of GNU binutils, which can be used to assemble and link binaries for the avr platform, instead of for the native arm platform...

[SECURITY] Fedora 20 Update: arm-none-eabi-binutils-cs-2014.05.28-3.fc20

This is a cross-compilation version of GNU Binutils, which can be used to assemble and link binaries for the arm-none-eabi platform. This Binutils package is based on the CodeSourcery 2014.05-28 release, which includes improved ARM target support compared to the corresponding FSF release...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

No description provided by source. Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool simply scans t...

vulnerabilities in libbfd (CVE-2014-beats-me)

Yo, Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool simply scans the file for runs of printable...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

Exploit for linux platform in category dos / poc Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

Binary File Descriptor Library libbfd - Out-of-Bounds Crash Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is tha...

Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash

Many shell users, and certainly a lot of the people working in computer forensics or other fields of information security, have a habit of running /usr/bin/strings on binary files originating from the Internet. Their understanding is that the tool simply scans the file for runs of printable...

GNU BinUtils 2.1x GAS Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19555/info GNU binutils GAS GNU assembler is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Remote...

PT-2014-8554

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted section group headers in an ELF file. Recommendations For GNU binutils...

PT-2014-8565

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue is related to a heap-based buffer overflow in the pe print edata function, which can be triggered by a truncated export table in a PE file. This can cause a denial of service,...

PT-2014-8567

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description A stack-based buffer overflow issue exists in the srec scan function in bfd/srec.c, allowing remote attackers to cause a denial of service crash and possibly have other unspecified impact via ...

PT-2014-8699

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue allows local users to delete arbitrary files or create arbitrary files via directory traversal vulnerabilities in GNU binutils. This can be achieved by using a .. dot dot or full pat...

PT-2015-4077

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an invalid write, segmentation fault, and crash. This is achieved by exploiting a crafted extended name table in an...

PT-2014-8564

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE...

PT-2014-8566

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description A stack-based buffer overflow issue exists in the ihex scan function, located in bfd/ihex.c, which can be triggered by remote attackers using a crafted ihex file. This issue may cause a denial...

Gentoo Security Advisory GLSA 200506-01 (binutils)

The remote host is missing updates announced in advisory GLSA 200506-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200506-01 (binutils)

The remote host is missing updates announced in advisory GLSA 200506-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GNU BinUtils GAS缓冲区溢出漏洞

GNU BinUtils GAS是GNU的汇编器。 GNU BinUtils GAS存在缓冲区溢出，本地攻击者可以利用漏洞以用户进程权限执行任意指令。 通过诱使用户或自动系统使用gcc或gas构建恶意源文件，可导致触发漏洞，可能以用户进程权限执行任意指令。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu...

CVE-2005-4808

Buffer overflow in resetvars in config/tc-crx.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file...

CVE-2005-4807

Stack-based buffer overflow in the asbad function in messages.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code...