AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc (ALMALINUX9.2:CLSA-2026:1778660100)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778660100 advisory. - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at...

binutils:fuzz_dwarf: Null-dereference READ in load_separate_debug_files

Detailed Report: https://oss-fuzz.com/testcase?key=5204036239556608 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzdwarf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: loadseparatedebugfiles fuzzdwarf.c...

GNU Binutils Excessive Memory Consumption Vulnerability

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. GNU Binutils suffers from an excessive memory consumption vulnerability, which...

SUSE CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2022-48063

The connected sources confirm CVE-2022-48063 affects GNU Binutils prior to 2.40. The vulnerability is an excessive memory consumption issue in the load_separate_debug_files function (dwarf2.c). An attacker could create a crafted ELF file to trigger a DNS-based denial of service. Impact is limited...

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2022-48063: Uncontrolled Resource Consumption

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

binutils:fuzz_dwarf: Null-dereference READ in load_separate_debug_files

Detailed Report: https://oss-fuzz.com/testcase?key=6328029872259072 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdwarf Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: loadseparatedebugfiles fuzzdwarf.c...

binutils:fuzz_dwarf: Null-dereference READ in load_separate_debug_files

Detailed Report: https://oss-fuzz.com/testcase?key=6117248264175616 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdwarf Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: loadseparatedebugfiles fuzzdwarf.c...