Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 294

Export CSV
CVE-2017-14128

binutils: Heap-based buffer over-read in the decode_line_info function

The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16831

binutils: Integer overflow in coffgen.c

coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16830

binutils: Segmentation fault in the print_gnu_property_note function

The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-13757

binutils: heap-based buffer over-read in elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-12449

binutils: out of bounds heap read in _bfd_vms_save_sized_string function

The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file.

CVSS 3.0 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16829

binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function

The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16828

binutils: Integer overflow in the display_debug_frames function

The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-13716

binutils: Memory leak with the C++ symbol demangler routine in libiberty

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16827

binutils: Invalid free in the aout_get_external_symbols function

The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16826

binutils: Invalid memory access in the coff_slurp_line_table function

The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-13710

binutils: NULL pointer dereference in the setup_group function

The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-12448

binutils: heap use after free in bfd_cache_close function

The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c.

CVSS 3.0 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9747

binutils: Stack-based buffer over-read in ieee_archive_p function while disassembling corrupt IEEE binary

The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.

CVSS 3.0 · 7.8 High EPSS 7.9% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15996

binutils: Excessive memory allocation in elfcomm.c

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15939

binutils: NULL pointer dereference in the concat_filename

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-12967

binutils: Stack-based buffer over-read in getsym function in tekhex.c

The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15938

binutils: Invalid memory read in find_abstract_instance_name

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).

CVSS 3.0 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15225

binutils: Memory leak in _bfd_dwarf2_cleanup_debug_info

_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-12799

binutils: Heap-based 1 byte buffer over-write in elf_read_notes function in bfd/elf.c

The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.

CVSS 3.0 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2014-9939

binutils: buffer overflow in ihex.c

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Gnu
Products
Binutils