Lucene search
+L

563 matches found

CNNVD
CNNVD
•added 2021/04/29 12:00 a.m.•5 views

binutils readelf 缓冲区错误漏洞

binutils readelf is a software application. Displays information about one or more ELF format object files. A buffer error vulnerability exists in binutils readelf 2.35 program, which can be exploited by an attacker to potentially trigger a stack buffer overflow if the victim can be persuaded to...

7.8CVSS7.2AI score0.03278EPSS
SaveExploits2References12
Cvelist
Cvelist
•added 2021/04/29 12:00 a.m.•40 views

CVE-2021-20294

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...

7.8AI score0.03278EPSS
SaveExploits2References6
CVE
CVE
•added 2021/04/29 12:00 a.m.•178 views

CVE-2021-20294

CVE-2021-20294 affects GNU Binutils readelf 2.35. Reading a crafted file can trigger a stack-based buffer overflow and an out-of-bounds write, with potential impact to confidentiality, integrity and availability. Exploitation details are present in a GitHub PoC (out-of-bounds write/stack overflow...

7.8CVSS7.4AI score0.03278EPSS
SaveExploits2References6Affected Software1
Debian CVE
Debian CVE
•added 2021/04/29 12:00 a.m.•47 views

CVE-2021-20294

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...

7.8CVSS7.2AI score0.03278EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/29 12:00 a.m.•5 views

CVE-2021-20294: Out-of-bounds Write

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...

7.8CVSS7.5AI score0.03278EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2021/03/26 11:52 a.m.•38 views

CVE-2021-20294

A flaw was found in binutils' readelf program. An attacker who is able to convince a victim using readelf to read a crafted file, could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity...

7.8CVSS0.8AI score0.03278EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•7 views

PT-2021-7965 · Elfutils +4 · Elfutils +4

Name of the Vulnerable Software and Affected Versions: Elfutils versions 0.183 Description: The issue is related to the handle symtab function in the readelf.c component of the Elfutils utility for modifying and analyzing ELF binary files. It involves an infinite loop with an unreachable exit...

6.5CVSS6.3AI score0.02791EPSS
SaveExploits8References55
RedhatCVE
RedhatCVE
•added 2020/12/11 12:57 p.m.•35 views

CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

5.5CVSS3.1AI score0.00954EPSS
SaveExploits1References5
OSV
OSV
•added 2020/12/09 9:15 p.m.•2 views

DEBIAN-CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

5.5CVSS7AI score0.00954EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2020/12/09 9:15 p.m.•75 views

CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

5.5CVSS3.1AI score0.00954EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/09 9:05 p.m.•75 views

CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

5.5CVSS7AI score0.00954EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/09 12:00 a.m.•3 views

CVE-2020-16590: Double Free

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

5.5CVSS5.9AI score0.00954EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/11/02 12:00 a.m.•47 views

openSUSE Security Update : binutils (openSUSE-2020-1790)

This update for binutils fixes the following issues : binutils was updated to version 2.35. jscECO-2373 Update to binutils 2.35 : - The assembler can now produce DWARF-5 format line number tables. - Readelf now has a 'lint' mode to enable extra checks of the files it is processing. - Readelf will...

7.8CVSS6.6AI score0.02752EPSS
SaveExploits8References21
OPENSUSE Linux
OPENSUSE Linux
•added 2020/10/31 12:00 a.m.•73 views

Security update for binutils (moderate)

openSUSE Security Update: Security update for binutils Announcement ID: openSUSE-SU-2020:1790-1 Rating: moderate References: 1126826 1126829 1126831 1140126 1142649 1143609 1153768 1153770 1157755 1160254 1160590 1163333 1163744 Cross-References: CVE-2019-12972 CVE-2019-14250 CVE-2019-14444...

7.8CVSS8AI score0.02752EPSS
SaveExploits8References13
OSV
OSV
•added 2020/10/28 7:09 a.m.•43 views

SUSE-SU-2020:3060-1 Security update for binutils

This update for binutils fixes the following issues: binutils was updated to version 2.35. jscECO-2373 Update to binutils 2.35: The assembler can now produce DWARF-5 format line number tables. Readelf now has a 'lint' mode to enable extra checks of the files it is processing. Readelf will now...

7.8CVSS6.4AI score0.02752EPSS
SaveExploits8References22
Tenable Nessus
Tenable Nessus
•added 2020/09/28 12:00 a.m.•52 views

EulerOS 2.0 SP3 : binutils (EulerOS-SA-2020-2072)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in...

7.8CVSS7AI score0.03293EPSS
SaveExploits8References9
Microsoft CVE
Microsoft CVE
•added 2020/08/18 7:00 a.m.•12 views

apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file as demonstrated by readelf.

...

5.5CVSS6.4AI score0.01494EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2020/08/18 7:00 a.m.•10 views

An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.

...

7.8CVSS7.5AI score0.01976EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2020/07/07 10:30 a.m.•25 views

file: out-of-bounds read via a crafted ELF file

The docorenote function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted ELF file...

6.5CVSS7.3AI score0.0341EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/06/12 6:54 a.m.•12 views

file: out-of-bounds read via a crafted ELF file

The docorenote function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted ELF file...

6.5CVSS7.3AI score0.0341EPSS
SaveExploits0References4
Rows per page
Query Builder