CVE-2019-9075

binutils: heap-based buffer overflow in function _bfd_archive_64_bit_slurp_armap in archive64.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.

CVSS 3.1 · 7.8 High EPSS 1.7% KEV · Not listed

Vendors

Canonical F5 Gnu and 1 more

Products

Ubuntu Linux Big-ip Access Policy Manager Big-ip Advanced Firewall Manager and 15 more

CVE-2019-9074

binutils: out-of-bound read in function bfd_getl32 in libbfd.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Canonical Gnu Netapp

Products

Ubuntu Linux Binutils Hci Management Node and 1 more

CVE-2019-9073

binutils: excessive memory allocation in function _bfd_elf_slurp_version_tables in elf.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Canonical Gnu Netapp

Products

Ubuntu Linux Binutils Hci Management Node and 1 more

CVE-2019-9072

binutils: excessive memory allocation in function setup_group in elf.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Gnu Netapp

Products

Binutils Hci Management Node Solidfire

CVE-2019-9071

binutils: stack consumption in function d_count_templates_scopes in cp-demangle.c

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Canonical Gnu Netapp

Products

Ubuntu Linux Binutils Hci Management Node and 1 more

CVE-2019-9070

binutils: heap-based buffer over-read in function d_expression_1 in cp-demangle.c

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed

Vendors

Canonical F5 Gnu and 1 more

Products

Ubuntu Linux Traffix Signaling Delivery Controller Binutils and 1 more

CVE-2019-17451

binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.

CVSS 3.1 · 6.5 Medium EPSS 2.4% KEV · Not listed

Vendors

Canonical Gnu Opensuse and 1 more

Products

Ubuntu Linux Binutils Leap and 1 more

CVE-2019-17450

binutils: denial of service via crafted ELF file

find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

CVSS 3.1 · 6.5 Medium EPSS 2.8% KEV · Not listed

Vendors

Canonical Gnu Opensuse and 1 more

Products

Ubuntu Linux Binutils Leap and 1 more

CVE-2019-14444

binutils: integer overflow in function apply_relocation in readelf.c

apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Canonical Gnu Netapp and 1 more

Products

Ubuntu Linux Binutils Hci Management Node and 2 more

CVE-2019-1010204

binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial of service

GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Gnu Netapp Redhat

Products

Binutils Binutils Gold Hci Management Node and 2 more

CVE-2018-9996

binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2018-9138

binutils: Stack Exhaustion in the the C++ demangling functions provided by libiberty

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.

CVSS 3.0 · 5.5 Medium EPSS 1.0% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2018-8945

binutils: Crash in elf.c:bfd_section_from_shdr() with crafted executable

The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Gnu Redhat

Products

Binutils Enterprise Linux Enterprise Linux Desktop and 2 more

CVE-2018-7643

binutils: Integer overflow in the display_debug_ranges function resulting in crash

The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed

Vendors

Gnu Redhat

Products

Binutils Enterprise Linux Enterprise Linux Desktop and 2 more

CVE-2018-7642

binutils: NULL pointer dereference in swap_std_reloc_in function in aoutx.h resulting in crash

The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (aout_32_swap_std_reloc_out NULL pointer dereference and application crash) via a crafted ELF file, as demonstrated by objcopy.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Gnu Redhat

Products

Binutils Enterprise Linux Enterprise Linux Desktop and 2 more

CVE-2018-7570

binutils: NULL pointer dereference the assign_file_positions_for_non_load_sections function in libbfd library

The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2018-7569

binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Gnu Redhat

Products

Binutils Enterprise Linux Enterprise Linux Desktop and 2 more

CVE-2018-7568

binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library

The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Gnu Redhat

Products

Binutils Enterprise Linux Enterprise Linux Desktop and 2 more

CVE-2018-7208

binutils: Improper bounds check in coffgen.c:coff_pointerize_aux() allows for denial of service when parsing a crafted COFF file

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed

Vendors

Gnu Redhat

Products

Binutils Enterprise Linux Enterprise Linux Desktop and 2 more

CVE-2018-6872

binutils: out of bounds read in elf_parse_notes function in elf.c file in libbfd library

The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed

Vendors

Gnu

Products

Binutils