objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

Astra Linux – vulnerability in binutils

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can cause an invalid offsetsize value to be used within bytegetlittleendian, resulting in an abort SIGABRT...

Astra Linux – vulnerability in binutils

Binutils’ objdump contains a denial-of-service vulnerability when processing a specially crafted binary with malformed DWARF debugrnglists data. A logic error in handling the debugrnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an...

Astra Linux – vulnerability in binutils

A vulnerability was found in Binutils prior to version 2.46. When processing a specially crafted binary containing malformed debug information, objdump contains a denial-of-service vulnerability. A logic flaw in how DWARF location list headers are handled may cause objdump to enter an infinite...

Astra Linux – vulnerability in binutils

A NULL pointer dereference also known as SEGV on an unknown address of 0x000000000000 was observed in workstuffcopytofrom within cplus-dem.c in GNU libiberty, as included in GNU Binutils 2.30. This can occur during execution of objdump...

Astra Linux – Vulnerability in binutils

Heap-based Buffer Overflow in the bfdgetl32 function in Binutils objdump 3.37...

Astra Linux – vulnerability in binutils

There is a flaw in bfdpefparsefunctionstubs within bfd/pef.c in binutils in versions prior to 2.34; this flaw may allow an attacker capable of submitting a specially crafted file to be processed by objdump, resulting in a NULL pointer dereference. The primary risk posed by this flaw is applicatio...

Astra Linux – vulnerability in binutils

An issue was discovered: Binutils objdump prior to version 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via the bfdmachogetsyntheticsymtab function in match-o.c...

Astra Linux – vulnerability in binutils

An issue was discovered: Binutils objdump prior to version 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via the comparesymbols function...

Astra Linux – vulnerability in binutils

There is a flaw in binutils /bfd/pef.c. An attacker capable of submitting a specially crafted input file for processing by the objdump program could trigger a null pointer dereference. The primary risk posed by this flaw is application availability. It affects binutils versions prior to 2.34...

Astra Linux – vulnerability in binutils

The demangletemplate function in cplus-dem.c within GNU libiberty, as included in GNU Binutils 2.30, enables attackers to trigger excessive memory consumption i.e., OOM during the “Create an array for saving the template argument values” XNEWVEC call. This can happen when objdump is executed...

exploitarium

https://discord.gg/WytKH65ZR unitevi per ricerca, aiuto, documentazione e altre informazioni utili per gli interessati. Dichiarazione Questo repository era incompleto al momento della pubblicazione. Per quanto riguarda l'uso dell'IA, il mio flusso di lavoro di fuzzing è stato automatizzato dall'I...

CentOS Linux 7 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS7:CLSA-2023:1696877581)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1696877581 advisory. - coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate the symbol...

Rocky Linux 8 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc (crlsa-2021_4595)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214595 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779266445)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779266445 advisory. - A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debugtypesamep of the...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2023:1701293664)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2023:1701293664 advisory. - stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer...

AlmaLinux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775726631)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775726631 advisory. - A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...

CentOS Linux 8 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1777059908)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1777059908 advisory. - An issue was discovered in Binutils addr2line before 2.39.3, function parsemodule contains multiple out of bound reads which ma...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777949670)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777949670 advisory. - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a...

CentOS Linux 7 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777541514)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777541514 advisory. - An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils. CVE-2023-25584 - A vulnerability...