560 matches found
SUSE CVE-2019-8904
dobidnote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintf and filevprintf...
SUSE CVE-2019-8905
docorenote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintable, a different vulnerability than CVE-2018-10360...
SUSE CVE-2019-9077
An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in processmipsspecific in readelf.c via a malformed MIPS option section...
SUSE CVE-2019-14444
applyrelocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation in byteputlittleendian function in elfcomm.c via an ELF file, as demonstrated by readelf...
SUSE CVE-2020-16590
A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...
SUSE CVE-2021-20294
A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...
PT-2022-6961 · Gnu +6 · Binutils +6
Name of the Vulnerable Software and Affected Versions: binutils versions prior to 2.40 Description: The issue is related to a heap buffer overflow in the readelf component of GNU Binutils, specifically in the find section in set function within the readelf.c file. This occurs when processing ELF...
ToaruOS Code Execution Vulnerability
ToaruOS is an open source computer operating system written in the C language. A code execution vulnerability exists in ToaruOS version 2.0.1, which stems from a global overflow in readelf, and can be exploited to remotely execute code while parsing a specially crafted ELF file...
CVE-2022-38934
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...
CVE-2022-38934
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...
Design/Logic Flaw
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...
CVE-2022-38934
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...
CVE-2022-38934
CVE-2022-38934 affects ToaruOS 2.0.1, where readelf may read arbitrary addresses while parsing crafted ELF files. The NVD/NVD-derived metrics assign a low impact (AV:L/AC:L/PR:N/UI:R/C:N/I:N/A:L; base score 3.3). Connected Red Hat and other sources reiterate the readelf vector in ToaruOS 2.0.1; P...
PT-2022-24622 · Toaruos · Toaruos
Name of the Vulnerable Software and Affected Versions: ToaruOS version 2.0.1 Description: The issue concerns arbitrary address read vulnerabilities in the readelf component of ToaruOS when it parses a crafted ELF file. Recommendations: For ToaruOS version 2.0.1, at the moment, there is no...
CVE-2022-38934: Out-of-bounds Read
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...
ToaruOS 缓冲区错误漏洞
ToaruOS is an open source computer operating system written in the C language. A security vulnerability exists in ToaruOS version 2.0.1, which stems from some arbitrary address read vulnerabilities in its readelf when parsing carefully crafted ELF files...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...