binutils
18 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-6846 | < 2.47 | Binutils: binutils: arbitrary code execution via malformed xcoff object file processing | HIGH 7.8 | 0.2 % | ||
| CVE-2023-25584 | | Out of bounds read in parse_module function in bfd/vms-alpha.c | HIGH 7.1 | 0.4 % | ||
| CVE-2023-25585 | | Field `file_table` of `struct module *module` is uninitialized | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-25586 | | Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-25588 | | Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-1972 | affected at least binutils 2.40 | A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability. | MEDIUM 6.5 | 0.9 % | ||
| CVE-2023-1579 | unknown | Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64. | HIGH 7.8 | 0.5 % | ||
| CVE-2022-4285 | binutils 2.39-7 | An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may resul | MEDIUM 5.5 | 0.4 % | ||
| CVE-2021-3530 | GNU Binutils version before and including 2.36 | A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted sym | HIGH 7.5 | 2.4 % | ||
| CVE-2021-3549 | GNU binutils version 2.36 | An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to av | HIGH 7.1 | 1.0 % | ||
| CVE-2021-20294 | binutils 2.35.2 | A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could t | HIGH 7.8 | 3.3 % | ||
| CVE-2021-20197 | binutils 2.35 | There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ran | MEDIUM 6.3 | 0.3 % | ||
| CVE-2021-20284 | Binutils 2.35.1 | A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-35507 | binutils 2.34 | There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able | MEDIUM 5.5 | 1.2 % | ||
| CVE-2020-35496 | binutils 2.34 | There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file t | MEDIUM 5.5 | 1.1 % | ||
| CVE-2020-35495 | binutils 2.34 | There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could c | MEDIUM 5.5 | 1.2 % | ||
| CVE-2020-35494 | binutils 2.34 | There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could ca | MEDIUM 6.1 | 1.1 % | ||
| CVE-2020-35493 | binutils 2.34 | A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buff | MEDIUM 5.5 | 1.1 % |