CVE-2014-8501

2014-12-0900:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.1%

JSON

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils
2.24 and earlier allows remote attackers to cause a denial of service
(out-of-bounds write) and possibly have other unspecified impact via a
crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.

Bugs

<https://sourceware.org/bugzilla/show_bug.cgi?id=17512c0>

Notes

Author	Note
sbeattie	binutils USN description: Hanno Böck discovered that the _bfd_XXi_swap_aouthdr_in function in libbfd in GNU binutils allowed out-of-bounds writes. An attacker could use this to craft input that could cause a denial of service (application crash) or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchbinutils< 2.20.1-3ubuntu7.2UNKNOWN
ubuntu12.04noarchbinutils< 2.22-6ubuntu1.2UNKNOWN
ubuntu14.04noarchbinutils< 2.24-5ubuntu3.1UNKNOWN
ubuntu14.10noarchbinutils< 2.24.90.20141014-0ubuntu3.1UNKNOWN
ubuntu14.04noarchgdb< 7.7.1-0ubuntu5~14.04.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	binutils	< 2.20.1-3ubuntu7.2	UNKNOWN
ubuntu	12.04	noarch	binutils	< 2.22-6ubuntu1.2	UNKNOWN
ubuntu	14.04	noarch	binutils	< 2.24-5ubuntu3.1	UNKNOWN
ubuntu	14.10	noarch	binutils	< 2.24.90.20141014-0ubuntu3.1	UNKNOWN
ubuntu	14.04	noarch	gdb	< 7.7.1-0ubuntu5~14.04.3	UNKNOWN