Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 294

Export CSV
CVE-2017-9743

binutils: Global buffer over-read in print_insn_score32 function while disassembling corrupt score binary

The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9742

binutils: Global buffer over-read in print_insn_score16 function while disassembling corrupt score binary

The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 8.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9744

binutils: Address violation in sh_elf_set_mach_from_flags function when disassembling a corrupt SH binary

The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9745

binutils: Heap buffer over-read in _bfd_vms_slurp_etir function when handling VMS alpha binaries

The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 2.7% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9746

binutils: Heap buffer over-read in disassemble_bytes function when disassembling a corrupt binary

The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 8.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9747

binutils: Stack-based buffer over-read in ieee_archive_p function while disassembling corrupt IEEE binary

The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.

CVSS 3.0 · 7.8 High EPSS 7.9% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9748

binutils: Stack-based buffer over-read in ieee_object_p function

The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.

CVSS 3.0 · 7.8 High EPSS 7.9% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9749

binutils: Global buffer over-read in *regs* macros when disassembling corrupt bfin binary

The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 8.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9750

binutils: Global buffer over-read in opcodes/rx-decode.opc when disassembling a corrupt RX binary

opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 8.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9751

binutils: Stack-based buffer over-read in opcodes/rl78-decode.opc when disassembling a corrupt RL78 binary

opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15025

binutils: Divide-by-zero in decode_line_info

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9044

binutils: Out-of-bounds read in the print_symbol_for_build_attribute function

The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9754

binutils: Stack-based buffer over-read in process_otr function

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 2.7% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9755

binutils: Global buffer over-read in opcodes/i386-dis.c while checking invalid registers

opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9756

binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary

The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

CVSS 3.0 · 7.8 High EPSS 8.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9954

binutils: stack-based buffer over-read in getvalue function

The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9955

binutils: heap buffer over-read in get_build_id function

The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16829

binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function

The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9043

binutils: Shift exponent too large for type unsigned long in readelf.c

readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15024

binutils: Infinite recursion in find_abstract_instance_name

find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu
Products
Binutils