Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,296

Export CSV
CVE-2017-6891

libtasn1: Stack-based buffer overflow in asn1_find_node()

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

CVSS 3.1 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Apache Debian Gnu
Products
Bookkeeper Debian Linux Libtasn1
CVE-2017-6965

binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf

readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16830

binutils: Segmentation fault in the print_gnu_property_note function

The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-6966

binutils: Use-after-free in target_specific_reloc_handling in readelf

readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-6969

binutils: Heap-based buffer over-read in readelf when processing corrupt RL78 binaries

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.

CVSS 3.0 · 9.1 Critical EPSS 3.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7209

binutils: Null pointer dereference in dump_section_as_bytes function in readelf

The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16829

binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function

The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7210

binutils: Heap-based buffer over-reads in objdump

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7223

binutils: Global buffer overflow when attempting to unget EOF character

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7224

binutils: Invalid write in find_nearest_line function

The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7225

binutils: Null pointer dereference and invalid write in find_nearest_line function in addr2line

The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7226

binutils: Heap-based buffer over-read in pe_ILF_object_p function in libbfd

The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.

CVSS 3.0 · 9.1 Critical EPSS 2.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7227

binutils: Heap-based buffer overflow in ld due to missing null termination

GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7299

binutils: Out-of-bounds read in bfd_elf_final_link function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16828

binutils: Integer overflow in the display_debug_frames function

The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16827

binutils: Invalid free in the aout_get_external_symbols function

The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7300

binutils: Heap-buffer overflow in aout_link_add_symbols function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an incomplete check for invalid string offsets while loading symbols, leading to a GNU linker (ld) program crash.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7301

binutils: Off-by-one error in aout_link_add_symbols function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16826

binutils: Invalid memory access in the coff_slurp_line_table function

The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7302

binutils: Out-of-bounds read in wap_std_reloc_out function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils