Gnu

Binutils

274 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2017-14974

  • EPSS 0.37%
  • Veröffentlicht 02.10.2017 01:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (...

7.1

CVE-2017-14930

  • EPSS 0.37%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.

5.5

CVE-2017-14932

  • EPSS 0.37%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.

5.5

CVE-2017-14933

  • EPSS 0.5%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.

5.5

CVE-2017-14934

  • EPSS 0.36%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size val...

5.5

CVE-2017-14938

  • EPSS 0.5%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a craft...

5.5

CVE-2017-14939

  • EPSS 2.99%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and a...

5.5

CVE-2017-14940

  • EPSS 0.43%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF f...

7.8

CVE-2017-14745

  • EPSS 0.39%
  • Veröffentlicht 26.09.2017 16:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of s...

7.8

CVE-2017-14729

  • EPSS 0.3%
  • Veröffentlicht 25.09.2017 16:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based ...