Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 294

Export CSV
CVE-2018-6759

binutils: Unchecked strnlen in opncls.c:bfd_get_debug_link_info_1() can allow lead to denial of service

The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.

CVSS 3.1 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-6543

binutils: integer overflow in load_specific_debug_section function in objdump.c

In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-6323

binutils: Integer overflow in elf_object_p function in elfcode.h

The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS 5.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-20712

libiberty: heap-based buffer over-read in d_expression_1

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-20673

libiberty: Integer overflow in demangle_template() function

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux
CVE-2018-20671

binutils: Integer overflow in load_specific_debug_section function

load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-20657

libiberty: Memory leak in demangle_template function resulting in a denial of service

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
F5 Gnu Redhat
Products
Traffix Signaling Delivery Controller Binutils Enterprise Linux
CVE-2018-20651

binutils: NULL pointer dereference in elf_link_add_object_symbols function resulting in a denial of service

A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-20002

binutils: memory leak in _bfd_generic_read_minisymbols function in syms.c

The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
F5 Gnu Netapp
Products
Traffix Signaling Delivery Controller Binutils Cluster Data Ontap and 1 more
CVE-2018-19932

binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Cluster Data Ontap Vasa Provider
CVE-2018-19931

binutils: Heap-based buffer overflow in bfd_elf32_swap_phdr_in function resulting in a denial of service

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Canonical Gnu Netapp
Products
Ubuntu Linux Binutils Vasa Provider
CVE-2018-18701

binutils: infinite recursion in next_is_type_qual and cplus_demangle_type functions in cp-demangle.c

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-18607

binutils: NULL pointer dereference in elf_link_input_bfd in elflink.c

An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.

CVSS 3.0 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Gnu Netapp
Products
Debian Linux Binutils Data Ontap
CVE-2018-18606

binutils: NULL pointer dereference in _bfd_add_merge_section in merge_strings function in merge.c

An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.

CVSS 3.0 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Gnu Netapp
Products
Debian Linux Binutils Data Ontap
CVE-2018-18605

binutils: heap-based buffer over-read in sec_merge_hash_lookup in merge.c

A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.

CVSS 3.0 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Gnu Netapp
Products
Debian Linux Binutils Data Ontap
CVE-2018-18484

binutils: Stack exhaustion in cp-demangle.c allows for denial of service

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-18483

binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service

The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.

CVSS 3.0 · 7.8 High EPSS 2.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-18309

binutils: invalid memory address dereference in read_reloc in reloc.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-17985

binutils: Stack consumption problem caused by the cplus_demangle_type

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many 'P' characters.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2018-17794

binutils: NULL pointer dereference in libiberty/cplus-dem.c:work_stuff_copy_to_from() via crafted input

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu
Products
Binutils