| CVE |
Vendors |
Products |
Updated |
CVSS |
| CVE-2019-14444 |
1 Gnu |
1 Binutils |
2019-08-22 |
4.3 |
| apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf. |
| CVE-2019-14250 |
1 Gnu |
1 Binutils |
2019-08-22 |
4.3 |
| An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow. |
| CVE-2019-1010204 |
1 Gnu |
1 Binutils |
2019-08-22 |
4.3 |
| GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497,... |
| CVE-2019-13638 |
2 Gnu, Debian |
2 Patch, Debian Linux |
2019-08-16 |
9.3 |
| GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the... |
| CVE-2015-8985 |
1 Gnu |
1 Glibc |
2019-08-15 |
4.3 |
| The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing. |
| CVE-2016-10739 |
2 Gnu, Opensuse |
2 Glibc, Leap |
2019-08-06 |
4.6 |
| In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume... |
| CVE-2018-1000876 |
1 Gnu |
1 Binutils |
2019-08-06 |
4.6 |
| binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows... |
| CVE-2019-1010025 |
1 Gnu |
1 Glibc |
2019-08-05 |
5.0 |
| ** DISPUTED ** GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability." |
| CVE-2018-20651 |
1 Gnu |
1 Binutils |
2019-08-03 |
4.3 |
| A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A... |
| CVE-2018-20002 |
2 Gnu, F5 |
2 Binutils, Traffix Signaling Delivery Controller |
2019-08-03 |
4.3 |
| The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as... |
| CVE-2018-19932 |
1 Gnu |
1 Binutils |
2019-08-03 |
4.3 |
| An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c. |
| CVE-2018-19931 |
1 Gnu |
1 Binutils |
2019-08-03 |
6.8 |
| An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is... |
| CVE-2018-13033 |
2 Gnu, Redhat |
5 Binutils, Enterprise Linux Desktop, Enterprise Linux Server and 2 more |
2019-08-03 |
4.3 |
| The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by... |
| CVE-2018-12700 |
2 Gnu, Canonical |
2 Binutils, Ubuntu Linux |
2019-08-03 |
5.0 |
| A Stack Exhaustion issue was discovered in debug_write_type in debug.c in GNU Binutils 2.30 because of DEBUG_KIND_INDIRECT infinite recursion. |
| CVE-2018-12699 |
2 Gnu, Canonical |
2 Binutils, Ubuntu Linux |
2019-08-03 |
7.5 |
| finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during... |
| CVE-2018-12698 |
2 Gnu, Canonical |
2 Binutils, Ubuntu Linux |
2019-08-03 |
5.0 |
| demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can... |
| CVE-2018-12697 |
2 Gnu, Canonical |
2 Binutils, Ubuntu Linux |
2019-08-03 |
5.0 |
| A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump. |
| CVE-2018-12641 |
1 Gnu |
1 Binutils |
2019-08-03 |
4.3 |
| An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template,... |
| CVE-2018-10535 |
2 Gnu, Redhat |
4 Binutils, Enterprise Linux Desktop, Enterprise Linux Server and 1 more |
2019-08-03 |
4.3 |
| The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a... |
| CVE-2018-10534 |
2 Gnu, Redhat |
4 Binutils, Enterprise Linux Desktop, Enterprise Linux Server and 1 more |
2019-08-03 |
4.3 |
| The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the... |
