opensuse/cross-i386-binutils&distro=openSUSE Leap 15.3

Vulnerabilities (19)

• CVE-2021-3826Sep 1, 2022
  affected < 2.39-150100.7.40.1fixed 2.39-150100.7.40.1

  Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

• CVE-2022-38533Aug 25, 2022
  affected < 2.39-150100.7.40.1fixed 2.39-150100.7.40.1

  In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.

• CVE-2022-27943Mar 26, 2022
  affected < 2.39-150100.7.40.1fixed 2.39-150100.7.40.1

  libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

• CVE-2021-46195Jan 14, 2022
  affected < 2.39-150100.7.40.1fixed 2.39-150100.7.40.1

  GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.

• CVE-2021-45078Dec 15, 2021
  affected < 2.39-150100.7.40.1fixed 2.39-150100.7.40.1

  stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for

• CVE-2021-3530Jun 2, 2021
  affected < 2.39-150100.7.40.1fixed 2.39-150100.7.40.1

  A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

• CVE-2021-20294Apr 29, 2021
  affected < 2.37-7.26.1fixed 2.37-7.26.1

  A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confid

• CVE-2021-20197Mar 26, 2021
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivi

• CVE-2021-20284Mar 26, 2021
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.

• CVE-2020-35507Jan 4, 2021
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application

• CVE-2020-35496Jan 4, 2021
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw af

• CVE-2020-35493Jan 4, 2021
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.3

• CVE-2020-35448Dec 27, 2020
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.

• CVE-2020-16599Dec 9, 2020
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

• CVE-2020-16593Dec 9, 2020
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.

• CVE-2020-16592Dec 9, 2020
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

• CVE-2020-16591Dec 9, 2020
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.

• CVE-2020-16590Dec 9, 2020
  affected < 2.37-7.21.1fixed 2.37-7.21.1

  A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.

• CVE-2019-1010204Jul 23, 2019
  affected < 2.39-150100.7.40.1fixed 2.39-150100.7.40.1

  GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An