CVE-2017-8392

binutils: NULL pointer dereference in the _bfd_dwarf2_find_nearest_line function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8393

binutils: Out-of-bounds read due to wrong assumption for objcopy and strip

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8394

binutils: NULL pointer dereference in the _bfd_elf_large_com_section

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8395

binutils: Out-of-bounds write in the _bfd_generic_get_section_contents function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2014-8738

binutils: out of bounds memory write

The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended name table in an archive.

CVSS 2.0 · 5.0 Medium EPSS 5.2% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 2 more

Products

Ubuntu Linux Debian Linux Fedora and 2 more

CVE-2014-8737

binutils: directory traversal vulnerability

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.

CVSS 2.0 · 3.6 Low EPSS 1.0% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2014-8504

binutils: stack overflow in the SREC parser

Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2014-8503

binutils: stack overflow in objdump when parsing specially crafted ihex file

Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2014-8502

binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)

Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file.

CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2014-8501

binutils: out-of-bounds write when parsing specially crafted PE executable

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.

CVSS 2.0 · 7.5 High EPSS 5.2% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2014-8485

binutils: lack of range checking leading to controlled write in _bfd_elf_setup_sections()

The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.

CVSS 2.0 · 7.5 High EPSS 7.5% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2014-8484

binutils: invalid read flaw in libbfd

The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.

CVSS 2.0 · 5.0 Medium EPSS 5.1% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2025-1176

GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2012-3509

libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed

Vendors

Canonical Debian Gnu

Products

Ubuntu Linux Debian Linux Binutils and 1 more

CVE-2025-1153

GNU Binutils format.c bfd_set_format memory corruption

A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component.

CVSS 4.0 · 2.3 Low EPSS 1.4% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2025-1148

GNU Binutils ld ldelfgen.c link_order_scan memory leak

A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2025-1147

GNU Binutils nm nm.c internal_strlen buffer overflow

A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::internal_strlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2022-4285

binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Gnu Redhat

Products

Fedora Binutils Enterprise Linux and 2 more

CVE-2025-1150

GNU Binutils ld libbfd.c bfd_malloc memory leak

A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2025-1179

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer explains, that "[t]his bug has been fixed at some point between the 2.43 and 2.44 releases".

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Binutils