Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 294

Export CSV
CVE-2017-17123

binutils: NULL pointer dereference in the coff_slurp_reloc_table function

The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-17124

binutils: Heap buffer overflow in the _bfd_coff_read_string_table function

The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-17125

binutils: Buffer over-read in the _bfd_elf_get_symbol_version_string function

nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-17126

binutils: Invalid memory access in the load_debug_section function

The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.

CVSS 3.0 · 7.8 High EPSS 1.7% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-6965

binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf

readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-6966

binutils: Use-after-free in target_specific_reloc_handling in readelf

readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-6969

binutils: Heap-based buffer over-read in readelf when processing corrupt RL78 binaries

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.

CVSS 3.0 · 9.1 Critical EPSS 3.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7210

binutils: Heap-based buffer over-reads in objdump

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7223

binutils: Global buffer overflow when attempting to unget EOF character

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7224

binutils: Invalid write in find_nearest_line function

The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7225

binutils: Null pointer dereference and invalid write in find_nearest_line function in addr2line

The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7226

binutils: Heap-based buffer over-read in pe_ILF_object_p function in libbfd

The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.

CVSS 3.0 · 9.1 Critical EPSS 2.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7227

binutils: Heap-based buffer overflow in ld due to missing null termination

GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7299

binutils: Out-of-bounds read in bfd_elf_final_link function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7300

binutils: Heap-buffer overflow in aout_link_add_symbols function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an incomplete check for invalid string offsets while loading symbols, leading to a GNU linker (ld) program crash.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7301

binutils: Off-by-one error in aout_link_add_symbols function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7302

binutils: Out-of-bounds read in wap_std_reloc_out function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7303

binutils: Out-of-bounds read in find_link function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the find_link function) for null headers before attempting to match them. This vulnerability causes Binutils utilities like strip to crash.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7304

binutils: Out-of-bounds read in copy_special_section_fields function

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-7614

binutils: NULL pointer dereference in bfd_elf_final_link function

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.

CVSS 3.0 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Gnu
Products
Binutils