binutils Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/binutils/ Sun, 26 Feb 2023 06:41:16 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png binutils Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/binutils/ 32 32 CVE-2020-35448 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35448/ Sun, 26 Feb 2023 06:41:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35448/ An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.

The post CVE-2020-35448 appeared first on CVE Vulnerability.

]]> An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.

The post CVE-2020-35448 appeared first on CVE Vulnerability.

]]> CVE-2020-16590 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-16590/ Sun, 26 Feb 2023 06:38:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-16590/ A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.

The post CVE-2020-16590 appeared first on CVE Vulnerability.

]]> A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.

The post CVE-2020-16590 appeared first on CVE Vulnerability.

]]> CVE-2020-16591 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-16591/ Sun, 26 Feb 2023 06:38:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-16591/ A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.

The post CVE-2020-16591 appeared first on CVE Vulnerability.

]]> A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.

The post CVE-2020-16591 appeared first on CVE Vulnerability.

]]> CVE-2020-16592 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-16592/ Sun, 26 Feb 2023 06:38:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-16592/ A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

The post CVE-2020-16592 appeared first on CVE Vulnerability.

]]> A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

The post CVE-2020-16592 appeared first on CVE Vulnerability.

]]> CVE-2020-16593 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-16593/ Sun, 26 Feb 2023 06:38:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-16593/ A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.

The post CVE-2020-16593 appeared first on CVE Vulnerability.

]]> A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.

The post CVE-2020-16593 appeared first on CVE Vulnerability.

]]> CVE-2021-45078 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-45078/ Thu, 23 Feb 2023 14:12:49 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-45078/ stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.

The post CVE-2021-45078 appeared first on CVE Vulnerability.

]]> stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.

The post CVE-2021-45078 appeared first on CVE Vulnerability.

]]> CVE-2021-3549 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3549/ Thu, 23 Feb 2023 14:10:30 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3549/ An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

The post CVE-2021-3549 appeared first on CVE Vulnerability.

]]> An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

The post CVE-2021-3549 appeared first on CVE Vulnerability.

]]> CVE-2021-3530 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3530/ Thu, 23 Feb 2023 14:10:28 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3530/ A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

The post CVE-2021-3530 appeared first on CVE Vulnerability.

]]> A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

The post CVE-2021-3530 appeared first on CVE Vulnerability.

]]> CVE-2021-3487 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3487/ Thu, 23 Feb 2023 14:10:22 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3487/ There’s a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption.

The post CVE-2021-3487 appeared first on CVE Vulnerability.

]]> There’s a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption.

The post CVE-2021-3487 appeared first on CVE Vulnerability.

]]> CVE-2021-20284 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-20284/ Thu, 23 Feb 2023 14:06:43 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-20284/ A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.

The post CVE-2021-20284 appeared first on CVE Vulnerability.

]]> A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.

The post CVE-2021-20284 appeared first on CVE Vulnerability.

]]>