3178 matches found
CVE-2017-7226: Out-of-bounds Read
The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...
CVE-2017-7206
The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...
CVE-2017-7206
The CVE-2017-7206 issue affects libavcodec (libav) 9.21, specifically the ff_h2645_extract_rbsp function. A crafted H.264 video file can trigger a heap-based buffer over-read, leading to a denial of service and potential leakage of memory content. Documented impact scores in NVD show CVSS-2/3 bas...
CVE-2017-7210
objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...
CVE-2017-7206
The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...
CVE-2017-7206
The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...
PT-2017-17575
Name of the Vulnerable Software and Affected Versions libav versions 9.21 Description The issue allows remote attackers to cause a denial of service or obtain sensitive information from process memory via a crafted h264 video file. This is due to a heap-based buffer over-read in the ff h2645...
PT-2017-17579
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue arises from multiple heap-based buffer over-reads that occur when handling corrupt STABS enum type strings in a crafted object file, leading to a program crash. Recommendations For GNU Binutils...
CVE-2017-7210: Improper Restriction of Operations within the Bounds of a Memory Buffer
objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...
CVE-2017-6969
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...
CVE-2017-6960
An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...
CVE-2017-6969
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...
CVE-2017-6969
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...
CVE-2017-6960
CVE-2017-6960 affects apng2gif. The issue is an integer overflow in the load_apng path that causes a heap-based buffer over-read. Public advisories (Debian/Ubuntu) report this with fixes in newer package versions: Debian patching to 1.8-0.1~deb9u1 (DLA-2911) and Ubuntu USN-4513-1; OpenVAS/OSV ent...
CVE-2017-6969
CVE-2017-6969 affects readelf in GNU Binutils 2.28, describing a heap-based buffer over-read when processing corrupt RL78 binaries. Impact per sources: crashes and potential information leakage. Connected advisories (e.g., RH unpatched BINUTILS entries) list CVE-2017-6969 among vulnerabilities wi...
CVE-2017-6960
An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...
PT-2017-17433
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to a heap-based buffer over-read in readelf when processing corrupt RL78 binaries. This can cause program crashes and potentially lead to an information leak. Recommendations For GNU...
CVE-2017-6969: Out-of-bounds Read
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...
CVE-2017-6960: Integer Overflow or Wraparound
An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...