33 matches found
EUVD-2025-5211
Malicious code in bioql PyPI...
SUSE CVE-2024-58010
In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix integer overflow bug on 32 bit systems Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit syste...
DEBIAN-CVE-2024-58010
In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix integer overflow bug on 32 bit systems Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit syste...
OracleVM 3.4 : kernel-uek (OVMSA-2024-0011)
The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.89.4- isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284- tracing: Restructure traceclockglobal to never block Steven Rostedt VMware Orabug: 36940388 CVE-2021-46939- ud...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12606)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12606 advisory. - isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284 - tracing: Restructure traceclockglobal to never block Steve...
CVE-2024-26816
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the "startupxen" entry point. This information is used prior to booting th...
CVE-2024-26816 x86, relocs: Ignore relocations in .notes section
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the "startupxen" entry point. This information is used prior to booting th...
CVE-2024-26816 x86, relocs: Ignore relocations in .notes section
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the "startupxen" entry point. This information is used prior to booting th...
CVE-2024-26816
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the "startupxen" entry point. This information is used prior to booting th...
SUSE CVE-2017-17122
The dumprelocsinsection function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service excessive memory allocation, or heap-based buffer overflow and application crash or possibly have unspecified other...
binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite
Detailed Report: https://oss-fuzz.com/testcase?key=6518797619560448 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdbwrite coffwriterelocs...
binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite
Detailed Report: https://oss-fuzz.com/testcase?key=4555795422904320 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdbwrite coffwriterelocs...
PT-2022-13784
Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.8 Description The issue is related to an out-of-bounds read in the r bin ne get relocs function. This may allow attackers to read sensitive information or cause a crash. Recommendations For versions prior to 5.6.8...
ALBA-2021:3575 gcc-toolset-10-binutils bug fix update
Binutils is a collection of binary utilities, including ar for creating, modifying, and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...
gcc-toolset-10-binutils bug fix update
Binutils is a collection of binary utilities, including ar for creating, modifying, and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...
PT-2021-1181
Name of the Vulnerable Software and Affected Versions: Binutils affected versions not specified Description: The issue concerns the performance of the Binutils linker, which significantly decreased after it started supporting a new kernel feature called "secondary relocs". This update allows the...
OSV-2020-1386 Heap-buffer-overflow in parse_relocation_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400 Crash type: Heap-buffer-overflow READ 4 Crash state: parserelocationinfo getrelocs64 relocs...
PT-2020-21856
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the parse relocation info function, which is called by get relocs 64, and is...
OSV-2020-441 Heap-buffer-overflow in r_buf_cpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14125 Crash type: Heap-buffer-overflow WRITE Crash state: rbufcpy getrelocs64 relocs...
OSV-2020-170 Heap-buffer-overflow in populate_relocs_record
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21850 Crash type: Heap-buffer-overflow WRITE 4 Crash state: populaterelocsrecord relocs rbinobjectsetitems...