Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 294

Export CSV
CVE-2022-35205

binutils: reachable assertion in display_debug_names() in dwarf.c

An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2021-46174

binutils: heap-based buffer overflow in bfd_getl32() in libbfd.c via objdump

Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Binutils Gnu
Products
Objdump Binutils
CVE-2021-45078

binutils: out-of-bounds write in stab_xcoff_builtin_type() in stabs.c

stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Debian Fedoraproject Gnu and 2 more
Products
Debian Linux Fedora Binutils and 2 more
CVE-2021-3530

binutils: stack memory exhaustion in demangle_path() in rust-demangle.c

A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Ontap Select Deploy Administration Utility
CVE-2021-37322

binutils: use-after-free in c++filt in cplus-dem.c

GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils Gcc
CVE-2021-32256

binutils: stack-overflow issue in demangle_type in rust-demangle.c.

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2021-20294

binutils: stack buffer overflow WRITE may lead to a DoS via a crafted ELF

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability.

CVSS 3.1 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2021-20284

binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Gnu Netapp Redhat
Products
Binutils Cloud Backup Ontap Select Deploy Administration Utility and 1 more
CVE-2020-35448

binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.

CVSS 3.1 · 3.3 Low EPSS 1.2% KEV · Not listed
Vendors
Gnu Netapp Redhat
Products
Binutils Ontap Select Deploy Administration Utility Enterprise Linux
CVE-2020-35342

binutils: uninitialized heap memory in tic4x_print_cond() in opcodes/tic4x-dis.c

GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2020-21490

binutils: memory leak in get_field() in microblaze-dis.c

An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2020-19726

binutils: heap-based buffer overflow in bfd_getl32() in bfd/libbfd.c

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2020-19724

binutils: memory leak in get_data() in nm.c

A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2020-16599

binutils: Null Pointer Dereference in _bfd_elf_get_symbol_version_string could result in DoS

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Cloud Backup Hci Management Node and 2 more
CVE-2020-16593

binutils: Null Pointer Dereference in scan_unit_for_symbols could result in DoS

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Cloud Backup Ontap Select Deploy Administration Utility and 1 more
CVE-2020-16591

binutils: invalid read in process_symbol_table could result in DoS

A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Ontap Select Deploy Administration Utility
CVE-2020-16590

binutils: double free vulnerability in process_symbol_table could result in DoS

A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Ontap Select Deploy Administration Utility
CVE-2019-9076

binutils: excessive memory allocation in function elf_read_notes in elf.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Element Software Management