CVE-2024-53589

GNU objdump 2.43 is vulnerable to a Buffer Overflow within the Binary File Descriptor (BFD) library. The issue originates from the tekhex parser failing to properly validate the length of input data when processing tekhex-formatted files . An attacker can exploit this flaw using a specially craft...

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

GNU objdump security vulnerabilities

GNU objdump is a command-line program from the American GNU community for displaying various information about target files on Unix-like operating systems. A buffer overflow vulnerability exists in GNU objdump, which stems from the failure to properly validate the length of input data in the BFD...

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

PT-2024-35782

Name of the Vulnerable Software and Affected Versions GNU objdump version 2.43 Description The issue is related to a buffer overflow in the BFD Binary File Descriptor library's handling of tekhex format files. This could potentially lead to code execution. There is a mention of a critical buffer...

CVE-2024-53589: Buffer Copy without Checking Size of Input

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

binutils: heap-based buffer overflow in finish_stab in stabs.c

finishstab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump...

binutils:fuzz_objdump: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5187892316536832 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzobjdump Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d5d14c459b8 Crash State: printinsn disassemblesection...

CVE-2022-48744

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy In preparation for FORTIFYSOURCE performing compile-time and run-time field bounds checking for memcpy, memmove, and memset, avoid intentionally writing across neighboring fields. Use...

EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2023-3097)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37. CVE-2021-46174 - An issue was discovered function...

EulerOS 2.0 SP9 : binutils (EulerOS-SA-2023-2891)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37. CVE-2021-46174 - An issue was discovered function stabdemanglev3arg ...

GNU Binutils dump_relocs_in_section Buffer Overflow DoS

The vulnerability of the dumprelocsinsection function in the objdump.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

binutils:fuzz_objdump_safe: Invalid-free in alpha_ecoff_get_relocated_section_contents

Detailed Report: https://oss-fuzz.com/testcase?key=6396822459121664 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6020000000b8 Crash State: alphaecoffgetrelocatedsectioncontents...

USN-6413-1 binutils vulnerabilities

It was discovered that GNU binutils was not properly performing checks when dealing with memory allocation operations, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2017-1712...

Ubuntu 16.04 ESM / 18.04 ESM : GNU binutils vulnerabilities (USN-6413-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6413-1 advisory. It was discovered that GNU binutils was not properly performing checks when dealing with memory allocation operations, which could lead to...

OSV-2023-934 Index-out-of-bounds in wabt::BinaryReaderObjdump::OnReloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42528652 Crash type: Index-out-of-bounds Crash state: wabt::BinaryReaderObjdump::OnReloc wabt::BinaryReader::ReadRelocSection wabt::BinaryReader::ReadCustomSection...

CLSA-2023-1694538536 Fix CVE(s): CVE-2022-47695

SECURITY UPDATE: segmentation fault in objdump.c comparesymbols - debian/patches/CVE-2022-47695.patch: test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47695...

CLSA-2023-1694538006 Fix CVE(s): CVE-2022-47695

SECURITY UPDATE: segmentation fault in objdump.c comparesymbols - debian/patches/CVE-2022-47695.patch: test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47695...