BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-17360 | 5.5 | Sep 23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31.1 |
| CVE-2018-17359 | 5.5 | Sep 23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31.1 |
| CVE-2018-17358 | 5.5 | Sep 23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 Affected: 2.31.1 |
| CVE-2018-13033 | 5.5 | Jul 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and… Affected: 2.30 |
| CVE-2018-12641 | 5.5 | Jun 22 | An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30 Affected: 2.30 |
| CVE-2018-10535 | 5.5 | Apr 29 | The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section… Affected: 2.30 |
| CVE-2018-10534 | 5.5 | Apr 29 | The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a… Affected: 2.30 |
| CVE-2018-10372 | 5.5 | Apr 25 | process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary… Affected: 2.30 |
| CVE-2018-9996 | 5.5 | Apr 10 | An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30 Affected: 2.30 |
| CVE-2018-9138 | 5.5 | Mar 30 | An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30 Affected: 2.29; 2.30 |
| CVE-2018-8945 | 5.5 | Mar 22 | The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a… Affected: 2.30 |
| CVE-2018-7642 | 5.5 | Mar 2 | The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial… Affected: 2.30 |
| CVE-2018-7570 | 5.5 | Feb 28 | The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote… Affected: 2.30 |
| CVE-2018-7569 | 5.5 | Feb 28 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or… Affected: 2.30 |
| CVE-2018-7568 | 5.5 | Feb 28 | The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of… Affected: 2.30 |
| CVE-2018-6872 | 5.5 | Feb 9 | The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of… Affected: 2.30 |
| CVE-2018-6759 | 5.5 | Feb 6 | The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen… Affected: 2.30 |
| CVE-2017-17123 | 5.5 | Dec 4 | The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause… Affected: 2.29.1 |
| CVE-2017-17080 | 5.5 | Nov 30 | elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to… Affected: 2.29.1 |
| CVE-2017-15939 | 5.5 | Oct 27 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote… Affected: 2.29 |
| CVE-2017-15225 | 5.5 | Oct 10 | _bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial… Affected: 2.29 |
| CVE-2017-15025 | 5.5 | Oct 5 | decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2017-15024 | 5.5 | Oct 5 | find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-15023 | 5.5 | Oct 5 | read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count,… Affected: 2.29 |
| CVE-2017-15022 | 5.5 | Oct 5 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers… Affected: 2.29 |
| CVE-2017-15021 | 5.5 | Oct 5 | bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14974 | 5.5 | Oct 2 | The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain… Affected: 2.29 |
| CVE-2017-14940 | 5.5 | Sep 30 | scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14939 | 5.5 | Sep 30 | decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote… Affected: 2.29 |
| CVE-2017-14938 | 5.5 | Sep 30 | _bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14934 | 5.5 | Sep 30 | process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2017-14933 | 5.5 | Sep 30 | read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14932 | 5.5 | Sep 30 | decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2017-14930 | 5.5 | Sep 30 | Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a… Affected: 2.29 |
| CVE-2017-14529 | 5.5 | Sep 18 | The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which… Affected: 2.29 |
| CVE-2017-14130 | 5.5 | Sep 4 | The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to… Affected: 2.29 |
| CVE-2017-14129 | 5.5 | Sep 4 | The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14128 | 5.5 | Sep 4 | The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial… Affected: 2.29 |
| CVE-2017-13757 | 5.5 | Aug 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial… Affected: 2.29 |
| CVE-2017-13716 | 5.5 | Aug 28 | The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory… Affected: 2.29 |
| CVE-2017-9955 | 5.5 | Jun 26 | The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of… Affected: 2.28 |
| CVE-2017-9954 | 5.5 | Jun 26 | The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of… Affected: 2.28 |
| CVE-2017-9044 | 5.5 | May 18 | The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted… Affected: 2.28 |
| CVE-2017-9041 | 5.5 | May 18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling… Affected: 2.28 |
| CVE-2017-9040 | 5.5 | May 18 | GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in… Affected: 2.28 |
| CVE-2017-9039 | 5.5 | May 18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers… Affected: 2.28 |
| CVE-2017-9038 | 5.5 | May 18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the… Affected: 2.28 |
| CVE-2017-8421 | 5.5 | May 2 | The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which… Affected: 2.28 |
| CVE-2017-7299 | 5.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link… Affected: 2.28 |
| CVE-2017-7224 | 5.5 | Mar 22 | The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function… Affected: 2.28 |