binutils:fuzz_objdump_safe: Segv on unknown address in reloc_at

Detailed Report: https://oss-fuzz.com/testcase?key=5433319697547264 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: relocat readdebuglineheader...

wabt:wasm_objdump_fuzzer: Use-of-uninitialized-value in wabt::WriteDoubleHex

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=6743341487751168 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasmobjdumpfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_getb32

Detailed Report: https://oss-fuzz.com/testcase?key=6503406956576768 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000000c4c Crash State: bfdgetb32 somsetrelocinfo...

binutils:fuzz_objdump_safe: Heap-double-free in fuzz_display_object_bfd

Detailed Report: https://oss-fuzz.com/testcase?key=5657428250722304 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdumpsafe Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6210001ae100 Crash State: fuzzdisplayobjectbfd fuzzdisplayanybfd...

Security Bulletin: Publicly disclosed vulnerability in GNU Binutils affects IBM Netezza Performance Server

Summary GNU Binutils is used by IBM Netezza Platform Server. IBM Netezza Platform Server has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-3549 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds flaw in the objdump utility. By persuadin...

binutils 2.37 Objdump Segmentation Fault

Exploit Title: binutils 2.37 - Objdump Segmentation Fault Date: 2021-11-03 Exploit Author: p3tryx Vendor Homepage: https://www.gnu.org/software/binutils/ Version: binutils 2.37 Tested on: Ubuntu 18.04 CVE : CVE-2021-43149 Payload file %223"\972\00\0083=Q333A11111111411111333333A $$$\FF$\80 1114...

binutils 2.37 - Objdump Segmentation Fault

Exploit Title: binutils 2.37 - Objdump Segmentation Fault Date: 2021-11-03 Exploit Author: p3tryx Vendor Homepage: https://www.gnu.org/software/binutils/ Version: binutils 2.37 Tested on: Ubuntu 18.04 CVE : CVE-2021-43149 Payload file %223"\972\00\0083=Q333A11111111411111333333A $$$\FF$\80 1114...

binutils 2.37 - Objdump Segmentation Fault Vulnerability

Exploit Title: binutils 2.37 - Objdump Segmentation Fault Exploit Author: p3tryx Vendor Homepage: https://www.gnu.org/software/binutils/ Version: binutils 2.37 Tested on: Ubuntu 18.04 CVE : CVE-2021-43149 Payload file %223"\972\00\0083=Q333A11111111411111333333A $$$\FF$\80 1114...

SUSE SLES15 Security Update : binutils (SUSE-SU-2022:0934-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0934-1 advisory. - For compatibility on old code stream that expect 'brcl 0,label' to not be disassembled as 'jgnop label' on s390x. bsc1192267 This...

EulerOS Virtualization 3.0.6.0 : binutils (EulerOS-SA-2022-1056)

According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large...

EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2022-1110)

According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large...

binutils:fuzz_objdump: Heap-buffer-overflow in evax_bfd_print_dst

Detailed Report: https://oss-fuzz.com/testcase?key=6551914504912896 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000b5 Crash State: evaxbfdprintdst evaxbfdprintimage...

PT-2023-12565

Name of the Vulnerable Software and Affected Versions Binutils objdump version 3.37 Description A heap-based buffer overflow issue exists in the bfd getl32 function. Recommendations For Binutils objdump version 3.37, at the moment, there is no information about a newer version that contains a fix...

Security Bulletin: Publicly disclosed vulnerability in GNU Binutils affects IBM Netezza Platform Software

Summary GNU Binutils is used by IBM Netezza Platform Software. IBM Netezza Platform Software has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-3549 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds flaw in the objdump utility. By...

EulerOS Virtualization 3.0.2.6 : binutils (EulerOS-SA-2021-2903)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in bfdpefparsefunctionstubs of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafte...

EulerOS Virtualization 3.0.2.0 : binutils (EulerOS-SA-2021-2837)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large...

binutils:fuzz_objdump_safe: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5014565440585728 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdumpsafe Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7ffdc13ed3b8 Crash State: errorhandlerinternal...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-2793)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2021-2750)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large...

EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2021-2793)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large...