Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 294

Export CSV
CVE-2017-15020

binutils: Heap-based buffer overflow in parse_die

dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15021

binutils: Heap-based buffer over-read in bfd_get_debug_link_info_1

bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15022

binutils: NULL pointer dereference in dwarf2.c

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15023

binutils: NULL pointer dereference in read_formatted_entries

read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15024

binutils: Infinite recursion in find_abstract_instance_name

find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15025

binutils: Divide-by-zero in decode_line_info

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15225

binutils: Memory leak in _bfd_dwarf2_cleanup_debug_info

_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15938

binutils: Invalid memory read in find_abstract_instance_name

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).

CVSS 3.0 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15939

binutils: NULL pointer dereference in the concat_filename

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-15996

binutils: Excessive memory allocation in elfcomm.c

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16826

binutils: Invalid memory access in the coff_slurp_line_table function

The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16827

binutils: Invalid free in the aout_get_external_symbols function

The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16828

binutils: Integer overflow in the display_debug_frames function

The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16829

binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function

The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16830

binutils: Segmentation fault in the print_gnu_property_note function

The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16831

binutils: Integer overflow in coffgen.c

coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-16832

binutils: Segmentation fault in the pe_bfd_read_buildid function

The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-17080

binutils: Heap-based buffer over-read in bfd_getl32

elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to cause a denial of service (bfd_getl32 heap-based buffer over-read and application crash) via a crafted object file, related to elfcore_grok_netbsd_procinfo, elfcore_grok_openbsd_procinfo, and elfcore_grok_nto_status.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-17121

binutils: Memory access violation via a crafted COFF binary

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-17122

binutils: Excessive memory allocation in the dump_relocs_in_section function

The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service (excessive memory allocation, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PE file.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Gnu
Products
Binutils