Gnu

Binutils

252 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2017-15939

  • EPSS 0.34%
  • Veröffentlicht 27.10.2017 21:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and applic...

5.5

CVE-2017-15225

  • EPSS 0.23%
  • Veröffentlicht 10.10.2017 23:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.

7.8

CVE-2017-15020

  • EPSS 0.43%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 20.04.2025 01:37:25

dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via ...

5.5

CVE-2017-15021

  • EPSS 0.45%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 20.04.2025 01:37:25

bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafte...

5.5

CVE-2017-15022

  • EPSS 0.45%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 20.04.2025 01:37:25

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or...

5.5

CVE-2017-15023

  • EPSS 0.45%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 20.04.2025 01:37:25

read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer de...

5.5

CVE-2017-15024

  • EPSS 0.45%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 20.04.2025 01:37:25

find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF f...

5.5

CVE-2017-15025

  • EPSS 0.33%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 20.04.2025 01:37:25

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.

5.5

CVE-2017-14974

  • EPSS 0.39%
  • Veröffentlicht 02.10.2017 01:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (...

7.1

CVE-2017-14930

  • EPSS 0.31%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.