Design/Logic Flaw

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...

CVE-2022-38934

CVE-2022-38934 affects ToaruOS 2.0.1, where readelf may read arbitrary addresses while parsing crafted ELF files. The NVD/NVD-derived metrics assign a low impact (AV:L/AC:L/PR:N/UI:R/C:N/I:N/A:L; base score 3.3). Connected Red Hat and other sources reiterate the readelf vector in ToaruOS 2.0.1; P...

CVE-2022-38934

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...

ToaruOS 缓冲区错误漏洞

ToaruOS is an open source computer operating system written in the C language. A security vulnerability exists in ToaruOS version 2.0.1, which stems from some arbitrary address read vulnerabilities in its readelf when parsing carefully crafted ELF files...

PT-2022-24622 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS version 2.0.1 Description: The issue concerns arbitrary address read vulnerabilities in the readelf component of ToaruOS when it parses a crafted ELF file. Recommendations: For ToaruOS version 2.0.1, at the moment, there is no...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

Buffer overflow

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

CVE-2022-38932

ToaruOS 2.0.1 is affected by a readelf component vulnerability that introduces a global overflow when parsing crafted ELF files, enabling remote code execution. Root cause: a global overflow in readelf. Impact: remote code execution if untrusted ELF files are parsed. Mitigation/workaround from PT...

PT-2022-24621 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS version 2.0.1 Description: The issue allows for remote code execution when a crafted ELF file is parsed, due to a global overflow in the readelf component. Recommendations: For ToaruOS version 2.0.1, consider avoiding the use of reade...

PT-2023-13440 · Binutils +5 · Binutils +5

Name of the Vulnerable Software and Affected Versions: Binutils readelf version 2.38.50 Description: An issue was discovered in the function display debug names, allowing attackers to cause a denial of service through a reachable assertion failure. Recommendations: For Binutils readelf version...

OPENSUSE-SU-2021:1475-1 Security update for binutils

This update for binutils fixes the following issues: Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm Management Extension RME for AArch64 has been added. A new linker option '-z report-relative-reloc' for x86 ELF targets has be...

Security update for binutils (moderate)

openSUSE Security Update: Security update for binutils Announcement ID: openSUSE-SU-2021:1475-1 Rating: moderate References: 1179898 1179899 1179900 1179901 1179902 1179903 1180451 1180454 1180461 1181452 1182252 1183511 1183909 1184519 1184620 1184794 1188941 1191473 1192267 PM-2767 SLE-18637...

openSUSE: Security Advisory for binutils (openSUSE-SU-2021:3616-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:3616-1 Security update for binutils

This update for binutils fixes the following issues: Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm Management Extension RME for AArch64 has been added. A new linker option '-z report-relative-reloc' for x86 ELF targets has be...

Security update for binutils (moderate)

openSUSE Security Update: Security update for binutils Announcement ID: openSUSE-SU-2021:3616-1 Rating: moderate References: 1179898 1179899 1179900 1179901 1179902 1179903 1180451 1180454 1180461 1181452 1182252 1183511 1184620 1184794 PM-2767 SLE-18637 SLE-19618 SLE-21561 Cross-References:...

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality integrity and availability.

...

CVE-2021-20294

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...

DEBIAN-CVE-2021-20294

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...