GNU Binutils find_abstract_instance Heap Buffer Overflow DoS

The vulnerability of the findabstractinstance function in the bfd/dwarf2.c component of the GNU Binutils development environment is related to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created ELF file...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the dname, dencoding, and dlocalname functions in the cp-demangle.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker who operates remotely to trigge...

GNU Binutils elf_object_p Buffer Overflow DoS

The vulnerability of the elfobjectp function in the bfd/elfcode.h component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause service failures remotely...

GNU C Library getaddrinfo Confidential Data Access DoS

The vulnerability of the getaddrinfo function in the GNU C Library is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

GNU Binutils Development Environment Confidential Data Access DoS

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

GNU Binutils loaddebugsection Heap Buffer Overflow DoS

The vulnerability of the loaddebugsection function in the readelf.c component of the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

GNU Binutils ELF BFD Buffer Overflow DoS

The vulnerability of the ISCONTAINEDBYLMA macro in the bfd/elf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...

GNU Binutils Development Environment Buffer Overflow DoS

The vulnerability of the bfdgetdebuglinkinfo1 function in the opncls.c component of the GNU Binutils development environment is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause a service failure through the use of a special...

GNU C Library Heap Buffer Overflow DoS

The vulnerability of the GNU C Library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

RHEL 8 : emacs (RHSA-2023:7083)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7083 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp,...

GNU Binutils Development Environment DoS

The vulnerability of the setupgroup function in the elf.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

GNU Binutils Dwarf2 C Buffer Overflow DoS

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the bfdstabsectionfindnearestline function in the syss.c component of the GNU Binutils development environment is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to trigger a service failur...

CentOS 8 : libmicrohttpd (CESA-2023:7090)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:7090 advisory. - GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a multipart/form-data boundary in the postprocessor.c...

bfd coff-rs6000 function Heap Buffer Overflow DoS

The vulnerability of the bfdxcoffreadarhdr function in the bfd/coff-rs6000.c component of the GNU Binutils development environment is related to reading data beyond the allowed limits of the buffer. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...

GNU Binutils Dwarf2 Heap Buffer Overflow DoS

The vulnerability of the bfddwarf2cleanupdebuginfo function in the dwarf2.c component of the GNU Binutils development environment is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows an attacker who operates remotely to...

Low: Red Hat Security Advisory: gmp security and enhancement update

An update for gmp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

gmp: Integer overflow and resultant buffer overflow via crafted input

A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability...

Low: Red Hat Security Advisory: gdb security update

An update for gdb is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

USN-6472-1 gsl vulnerability

It was discovered that GNU Scientific Library incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code...