BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20284 | 5.5 | Mar 26 | A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated… Affected: 2.35.1 |
| CVE-2020-35507 | 5.5 | Jan 4 | There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be… Affected: before 2.34 |
| CVE-2020-35496 | 5.5 | Jan 4 | There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a… Affected: before 2.34 |
| CVE-2020-35495 | 5.5 | Jan 4 | There's a flaw in binutils /bfd/pef.c Affected: before 2.34 |
| CVE-2020-35493 | 5.5 | Jan 4 | A flaw exists in binutils in bfd/pef.c Affected: before 2.34 |
| CVE-2020-16599 | 5.5 | Dec 9 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in… Affected: 2.35 |
| CVE-2020-16593 | 5.5 | Dec 9 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as… Affected: 2.35 |
| CVE-2020-16592 | 5.5 | Dec 9 | A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial… Affected: 2.34 |
| CVE-2020-16591 | 5.5 | Dec 9 | A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif Affected: 2.35 |
| CVE-2020-16590 | 5.5 | Dec 9 | A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted… Affected: 2.35 |
| CVE-2019-14444 | 5.5 | Jul 30 | apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in… Affected: 2.32 |
| CVE-2019-14250 | 5.5 | Jul 24 | An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-1010204 | 5.5 | Jul 23 | GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read Affected: 2.21 through 2.31.1 |
| CVE-2019-12972 | 5.5 | Jun 26 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-9076 | 5.5 | Feb 24 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-9072 | 5.5 | Feb 24 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-9071 | 5.5 | Feb 24 | An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-9074 | 5.5 | Feb 24 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-9073 | 5.5 | Feb 24 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2018-20673 | 5.5 | Jan 4 | The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving… Affected: 2.31.1 |
| CVE-2018-20671 | 5.5 | Jan 4 | load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted… Affected: through 2.31.1 |
| CVE-2018-20651 | 5.5 | Jan 1 | A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils… Affected: 2.31.1 |
| CVE-2018-20623 | 5.5 | Dec 31 | In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file Affected: 2.31.1 |
| CVE-2018-20002 | 5.5 | Dec 10 | The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted… Affected: 2.31 |
| CVE-2018-19932 | 5.5 | Dec 7 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31 Affected: through 2.31 |
| CVE-2018-18701 | 5.5 | Oct 29 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-18700 | 5.5 | Oct 27 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-18607 | 5.5 | Oct 23 | An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-18606 | 5.5 | Oct 23 | An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-18605 | 5.5 | Oct 23 | A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU… Affected: 2.31 |
| CVE-2018-18484 | 5.5 | Oct 18 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-18309 | 5.5 | Oct 15 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-17985 | 5.5 | Oct 4 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-17360 | 5.5 | Sep 23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31.1 |
| CVE-2018-17359 | 5.5 | Sep 23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31.1 |
| CVE-2018-17358 | 5.5 | Sep 23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31.1 |
| CVE-2018-13033 | 5.5 | Jul 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and… Affected: 2.30 |
| CVE-2018-12641 | 5.5 | Jun 22 | An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30 Affected: 2.30 |
| CVE-2018-10535 | 5.5 | Apr 29 | The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section… Affected: 2.30 |
| CVE-2018-10534 | 5.5 | Apr 29 | The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a… Affected: 2.30 |
| CVE-2018-10372 | 5.5 | Apr 25 | process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary… Affected: 2.30 |
| CVE-2018-9996 | 5.5 | Apr 10 | An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30 Affected: 2.30 |
| CVE-2018-9138 | 5.5 | Mar 30 | An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30 Affected: 2.29; 2.30 |
| CVE-2018-8945 | 5.5 | Mar 22 | The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a… Affected: 2.30 |
| CVE-2018-7642 | 5.5 | Mar 2 | The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial… Affected: 2.30 |
| CVE-2018-7570 | 5.5 | Feb 28 | The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote… Affected: 2.30 |
| CVE-2018-7569 | 5.5 | Feb 28 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or… Affected: 2.30 |
| CVE-2018-7568 | 5.5 | Feb 28 | The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of… Affected: 2.30 |
| CVE-2018-6872 | 5.5 | Feb 9 | The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of… Affected: 2.30 |
| CVE-2018-6759 | 5.5 | Feb 6 | The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen… Affected: 2.30 |