CVE-2017-12459

binutils: out of bounds heap write in bfd_mach_o_read_symtab_strtab function

The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-9042

binutils: Invalid variable type in readelf.c

readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-9041

binutils: Heap buffer overflow in the process_mips_specific function

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-15023

binutils: NULL pointer dereference in read_formatted_entries

read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-9040

binutils: NULL pointer dereference in the process_mips_specific_function

GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-9039

binutils: Memory consumption via many program headers

GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-15022

binutils: NULL pointer dereference in dwarf2.c

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-12458

binutils: out of bounds heap read in nlm_swap_auxiliary_headers_in function

The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-9038

binutils: Heap-buffer overflow in the byte_get_little_endian

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8421

binutils: Memory exhaustion in objdump via a crafted PE file

The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-15021

binutils: Heap-based buffer over-read in bfd_get_debug_link_info_1

bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8398

binutils: Out-of-bounds read while dumping the debug information from a corrupt binary

dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8397

binutils: Out-of-bounds read and write while processing binary containing reloc(s) with negative addresses

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-15020

binutils: Heap-based buffer overflow in parse_die

dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-12457

binutils: NULL pointer dereference in bfd_make_section_with_flags function

The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file.

CVSS 3.0 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8396

binutils: Out-of-bounds read in the existing reloc offset range tests

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8395

binutils: Out-of-bounds write in the _bfd_generic_get_section_contents function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-14974

binutils: NULL pointer dereference in the *_get_synthetic_symtab functions

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8394

binutils: NULL pointer dereference in the _bfd_elf_large_com_section

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-8393

binutils: Out-of-bounds read due to wrong assumption for objcopy and strip

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Gnu

Products

Binutils