Gnu

Binutils

289 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2017-15021

  • EPSS 2.02%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 13.05.2026 00:24:29

bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafte...

5.5

CVE-2017-15022

  • EPSS 2.02%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 13.05.2026 00:24:29

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or...

5.5

CVE-2017-15023

  • EPSS 2.07%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 13.05.2026 00:24:29

read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer de...

5.5

CVE-2017-15024

  • EPSS 1.6%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 13.05.2026 00:24:29

find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF f...

5.5

CVE-2017-15025

  • EPSS 1.77%
  • Veröffentlicht 05.10.2017 01:29:06
  • Zuletzt bearbeitet 13.05.2026 00:24:29

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.

5.5

CVE-2017-14974

  • EPSS 0.98%
  • Veröffentlicht 02.10.2017 01:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (...

7.1

CVE-2017-14930

  • EPSS 1.44%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.

5.5

CVE-2017-14932

  • EPSS 1.29%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.

5.5

CVE-2017-14933

  • EPSS 1.28%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.

5.5

CVE-2017-14934

  • EPSS 1.24%
  • Veröffentlicht 30.09.2017 01:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size val...