Gnu

Binutils

262 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2014-8738

Exploit
  • EPSS 6.06%
  • Veröffentlicht 15.01.2015 15:59:14
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended name table in an archive.

3.6

CVE-2014-8737

Exploit
  • EPSS 0.06%
  • Veröffentlicht 09.12.2014 23:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) ...

7.5

CVE-2014-8504

Exploit
  • EPSS 4.45%
  • Veröffentlicht 09.12.2014 23:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.

7.5

CVE-2014-8503

Exploit
  • EPSS 9.96%
  • Veröffentlicht 09.12.2014 23:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.

7.5

CVE-2014-8502

Exploit
  • EPSS 8.37%
  • Veröffentlicht 09.12.2014 23:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE ...

7.5

CVE-2014-8501

Exploit
  • EPSS 6.12%
  • Veröffentlicht 09.12.2014 23:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in ...

7.5

CVE-2014-8485

Medienbericht Exploit
  • EPSS 4.18%
  • Veröffentlicht 09.12.2014 23:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.

5

CVE-2014-8484

  • EPSS 2.77%
  • Veröffentlicht 09.12.2014 23:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.

5

CVE-2012-3509

  • EPSS 1.75%
  • Veröffentlicht 05.09.2012 23:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors relate...

7.5

CVE-2006-2362

Exploit
  • EPSS 5.51%
  • Veröffentlicht 15.05.2006 16:06:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code ...