-
Notifications
You must be signed in to change notification settings - Fork 3
Expand file tree
/
Copy pathnode_10.14.2-jessie.clair.rest.json
More file actions
executable file
·9432 lines (9432 loc) · 548 KB
/
node_10.14.2-jessie.clair.rest.json
File metadata and controls
executable file
·9432 lines (9432 loc) · 548 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
{
"Layer": {
"Name": "sha256:f9773e8c0ed73dcacf7761cc33b57dde8e2f54e544e936ed1ea008607ac9a533",
"NamespaceName": "debian:8",
"ParentName": "sha256:01fde004fea3d947781ddd8f2a5382cb4fdca3f81703c94fbc2aba9804745379",
"IndexedByVersion": 3,
"Features": [
{
"Name": "nettle",
"NamespaceName": "debian:8",
"VersionFormat": "dpkg",
"Version": "2.7.1-5+deb8u2",
"Vulnerabilities": [
{
"Name": "CVE-2018-16869",
"NamespaceName": "debian:8",
"Description": "A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-16869",
"Severity": "Unknown"
}
],
"AddedBy": "sha256:4b105072aa89afc93b7238396c7ca2951308666854da2fb399c4ca362c93b445"
},
{
"Name": "liblocale-gettext-perl",
"NamespaceName": "debian:8",
"VersionFormat": "dpkg",
"Version": "1.05-8",
"AddedBy": "sha256:4b105072aa89afc93b7238396c7ca2951308666854da2fb399c4ca362c93b445"
},
{
"Name": "findutils",
"NamespaceName": "debian:8",
"VersionFormat": "dpkg",
"Version": "4.4.2-9",
"AddedBy": "sha256:4b105072aa89afc93b7238396c7ca2951308666854da2fb399c4ca362c93b445"
},
{
"Name": "ustr",
"NamespaceName": "debian:8",
"VersionFormat": "dpkg",
"Version": "1.0.4-3",
"AddedBy": "sha256:4b105072aa89afc93b7238396c7ca2951308666854da2fb399c4ca362c93b445"
},
{
"Name": "sed",
"NamespaceName": "debian:8",
"VersionFormat": "dpkg",
"Version": "4.2.2-4+deb8u1",
"AddedBy": "sha256:4b105072aa89afc93b7238396c7ca2951308666854da2fb399c4ca362c93b445"
},
{
"Name": "binutils",
"NamespaceName": "debian:8",
"VersionFormat": "dpkg",
"Version": "2.25-5+deb8u1",
"Vulnerabilities": [
{
"Name": "CVE-2018-7643",
"NamespaceName": "debian:8",
"Description": "The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-7643",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-12452",
"NamespaceName": "debian:8",
"Description": "The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12452",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-9748",
"NamespaceName": "debian:8",
"Description": "The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9748",
"Severity": "Low"
},
{
"Name": "CVE-2017-9043",
"NamespaceName": "debian:8",
"Description": "readelf.c in GNU Binutils 2017-04-12 has a \"shift exponent too large for type unsigned long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9043",
"Severity": "Low"
},
{
"Name": "CVE-2018-20651",
"NamespaceName": "debian:8",
"Description": "A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-20651",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-16828",
"NamespaceName": "debian:8",
"Description": "The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-16828",
"Severity": "Low"
},
{
"Name": "CVE-2019-9073",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-9073",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-9743",
"NamespaceName": "debian:8",
"Description": "The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9743",
"Severity": "Low"
},
{
"Name": "CVE-2017-9749",
"NamespaceName": "debian:8",
"Description": "The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9749",
"Severity": "Low"
},
{
"Name": "CVE-2017-17125",
"NamespaceName": "debian:8",
"Description": "nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-17125",
"Severity": "Low"
},
{
"Name": "CVE-2017-14129",
"NamespaceName": "debian:8",
"Description": "The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14129",
"Severity": "Low"
},
{
"Name": "CVE-2019-12972",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\\0' character.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-12972",
"Severity": "Negligible"
},
{
"Name": "CVE-2016-4487",
"NamespaceName": "debian:8",
"Description": "Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to \"btypevec.\"",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-4487",
"Severity": "Low"
},
{
"Name": "CVE-2018-20671",
"NamespaceName": "debian:8",
"Description": "load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-20671",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-15025",
"NamespaceName": "debian:8",
"Description": "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-15025",
"Severity": "Low"
},
{
"Name": "CVE-2017-17122",
"NamespaceName": "debian:8",
"Description": "The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service (excessive memory allocation, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PE file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-17122",
"Severity": "Low"
},
{
"Name": "CVE-2017-9752",
"NamespaceName": "debian:8",
"Description": "bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9752",
"Severity": "Low"
},
{
"Name": "CVE-2019-17451",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-17451",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-6965",
"NamespaceName": "debian:8",
"Description": "readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-6965",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-12700",
"NamespaceName": "debian:8",
"Description": "A Stack Exhaustion issue was discovered in debug_write_type in debug.c in GNU Binutils 2.30 because of DEBUG_KIND_INDIRECT infinite recursion.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-12700",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-7302",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7302",
"Severity": "Unknown"
},
{
"Name": "CVE-2016-4489",
"NamespaceName": "debian:8",
"Description": "Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the \"demangling of virtual tables.\"",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-4489",
"Severity": "Low"
},
{
"Name": "CVE-2016-4488",
"NamespaceName": "debian:8",
"Description": "Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to \"ktypevec.\"",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-4488",
"Severity": "Low"
},
{
"Name": "CVE-2017-8397",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-8397",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-12455",
"NamespaceName": "debian:8",
"Description": "The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12455",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-9756",
"NamespaceName": "debian:8",
"Description": "The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9756",
"Severity": "Low"
},
{
"Name": "CVE-2018-20623",
"NamespaceName": "debian:8",
"Description": "In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-20623",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-14939",
"NamespaceName": "debian:8",
"Description": "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14939",
"Severity": "Low"
},
{
"Name": "CVE-2016-2226",
"NamespaceName": "debian:8",
"Description": "Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-2226",
"Severity": "Low"
},
{
"Name": "CVE-2019-9070",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-9070",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-16832",
"NamespaceName": "debian:8",
"Description": "The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-16832",
"Severity": "Low"
},
{
"Name": "CVE-2018-6323",
"NamespaceName": "debian:8",
"Description": "The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-6323",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-10372",
"NamespaceName": "debian:8",
"Description": "process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-10372",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-13033",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-13033",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-7210",
"NamespaceName": "debian:8",
"Description": "objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7210",
"Severity": "Low"
},
{
"Name": "CVE-2017-9954",
"NamespaceName": "debian:8",
"Description": "The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9954",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-14934",
"NamespaceName": "debian:8",
"Description": "process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size value in a CU structure.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14934",
"Severity": "Low"
},
{
"Name": "CVE-2017-8395",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-8395",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-7304",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7304",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-7301",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7301",
"Severity": "Unknown"
},
{
"Name": "CVE-2016-4490",
"NamespaceName": "debian:8",
"Description": "Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-4490",
"Severity": "Low"
},
{
"Name": "CVE-2017-9044",
"NamespaceName": "debian:8",
"Description": "The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9044",
"Severity": "Low"
},
{
"Name": "CVE-2018-18605",
"NamespaceName": "debian:8",
"Description": "A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-18605",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-7226",
"NamespaceName": "debian:8",
"Description": "The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7226",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-7224",
"NamespaceName": "debian:8",
"Description": "The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7224",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-12967",
"NamespaceName": "debian:8",
"Description": "The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12967",
"Severity": "Unknown"
},
{
"Name": "CVE-2019-14250",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-14250",
"Severity": "Negligible"
},
{
"Name": "CVE-2016-4492",
"NamespaceName": "debian:8",
"Description": "Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-4492",
"Severity": "Low"
},
{
"Name": "CVE-2017-16827",
"NamespaceName": "debian:8",
"Description": "The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-16827",
"Severity": "Low"
},
{
"Name": "CVE-2017-14745",
"NamespaceName": "debian:8",
"Description": "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14745",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-8393",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-8393",
"Severity": "Unknown"
},
{
"Name": "CVE-2019-9077",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-9077",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-14529",
"NamespaceName": "debian:8",
"Description": "The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14529",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-12449",
"NamespaceName": "debian:8",
"Description": "The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12449",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-17126",
"NamespaceName": "debian:8",
"Description": "The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-17126",
"Severity": "Low"
},
{
"Name": "CVE-2017-14729",
"NamespaceName": "debian:8",
"Description": "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14729",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-9955",
"NamespaceName": "debian:8",
"Description": "The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9955",
"Severity": "Unknown"
},
{
"Name": "CVE-2019-9075",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-9075",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-14128",
"NamespaceName": "debian:8",
"Description": "The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14128",
"Severity": "Low"
},
{
"Name": "CVE-2017-9754",
"NamespaceName": "debian:8",
"Description": "The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9754",
"Severity": "Low"
},
{
"Name": "CVE-2017-15996",
"NamespaceName": "debian:8",
"Description": "elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a \"buffer overflow on fuzzed archive header,\" related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-15996",
"Severity": "Low"
},
{
"Name": "CVE-2017-7303",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the find_link function) for null headers before attempting to match them. This vulnerability causes Binutils utilities like strip to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7303",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-20712",
"NamespaceName": "debian:8",
"Description": "A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-20712",
"Severity": "Negligible"
},
{
"Name": "CVE-2018-17359",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in bfd_zalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-17359",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-17121",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-17121",
"Severity": "Low"
},
{
"Name": "CVE-2018-6872",
"NamespaceName": "debian:8",
"Description": "The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-6872",
"Severity": "Unknown"
},
{
"Name": "CVE-2016-4491",
"NamespaceName": "debian:8",
"Description": "The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having \"itself as ancestor more than once.\"",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-4491",
"Severity": "Low"
},
{
"Name": "CVE-2018-18484",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-18484",
"Severity": "Negligible"
},
{
"Name": "CVE-2019-9071",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-9071",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-9042",
"NamespaceName": "debian:8",
"Description": "readelf.c in GNU Binutils 2017-04-12 has a \"cannot be represented in type long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9042",
"Severity": "Low"
},
{
"Name": "CVE-2017-9751",
"NamespaceName": "debian:8",
"Description": "opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9751",
"Severity": "Low"
},
{
"Name": "CVE-2017-12459",
"NamespaceName": "debian:8",
"Description": "The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12459",
"Severity": "Unknown"
},
{
"Name": "CVE-2014-9939",
"NamespaceName": "debian:8",
"Description": "ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2014-9939",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-8394",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-8394",
"Severity": "Unknown"
},
{
"Name": "CVE-2019-1010204",
"NamespaceName": "debian:8",
"Description": "GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-1010204",
"Severity": "Negligible"
},
{
"Name": "CVE-2016-4493",
"NamespaceName": "debian:8",
"Description": "The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-4493",
"Severity": "Low"
},
{
"Name": "CVE-2017-7614",
"NamespaceName": "debian:8",
"Description": "elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a \"member access within null pointer\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an \"int main() {return 0;}\" program.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7614",
"Severity": "Low"
},
{
"Name": "CVE-2017-17124",
"NamespaceName": "debian:8",
"Description": "The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-17124",
"Severity": "Low"
},
{
"Name": "CVE-2018-20002",
"NamespaceName": "debian:8",
"Description": "The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-20002",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-13757",
"NamespaceName": "debian:8",
"Description": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-13757",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-12699",
"NamespaceName": "debian:8",
"Description": "finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-12699",
"Severity": "Negligible"
},
{
"Name": "CVE-2018-7568",
"NamespaceName": "debian:8",
"Description": "The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-7568",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-18701",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-18701",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-14974",
"NamespaceName": "debian:8",
"Description": "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14974",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-9996",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-9996",
"Severity": "Negligible"
},
{
"Name": "CVE-2018-8945",
"NamespaceName": "debian:8",
"Description": "The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-8945",
"Severity": "Low"
},
{
"Name": "CVE-2017-9747",
"NamespaceName": "debian:8",
"Description": "The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9747",
"Severity": "Low"
},
{
"Name": "CVE-2017-7223",
"NamespaceName": "debian:8",
"Description": "GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7223",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-14940",
"NamespaceName": "debian:8",
"Description": "scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14940",
"Severity": "Low"
},
{
"Name": "CVE-2017-6969",
"NamespaceName": "debian:8",
"Description": "readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-6969",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-8398",
"NamespaceName": "debian:8",
"Description": "dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-8398",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-13716",
"NamespaceName": "debian:8",
"Description": "The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-13716",
"Severity": "Negligible"
},
{
"Name": "CVE-2018-12698",
"NamespaceName": "debian:8",
"Description": "demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the \"Create an array for saving the template argument values\" XNEWVEC call. This can occur during execution of objdump.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-12698",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-8421",
"NamespaceName": "debian:8",
"Description": "The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-8421",
"Severity": "Unknown"
},
{
"Name": "CVE-2019-1010180",
"NamespaceName": "debian:8",
"Description": "GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-1010180",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-15938",
"NamespaceName": "debian:8",
"Description": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-15938",
"Severity": "Low"
},
{
"Name": "CVE-2017-17123",
"NamespaceName": "debian:8",
"Description": "The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-17123",
"Severity": "Low"
},
{
"Name": "CVE-2018-9138",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-9138",
"Severity": "Negligible"
},
{
"Name": "CVE-2018-18607",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-18607",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-14933",
"NamespaceName": "debian:8",
"Description": "read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14933",
"Severity": "Low"
},
{
"Name": "CVE-2019-14444",
"NamespaceName": "debian:8",
"Description": "apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-14444",
"Severity": "Negligible"
},
{
"Name": "CVE-2018-1000876",
"NamespaceName": "debian:8",
"Description": "binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca579461774860574eabfd7f18f.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-1000876",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-9750",
"NamespaceName": "debian:8",
"Description": "opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9750",
"Severity": "Low"
},
{
"Name": "CVE-2017-12450",
"NamespaceName": "debian:8",
"Description": "The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12450",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-14938",
"NamespaceName": "debian:8",
"Description": "_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14938",
"Severity": "Low"
},
{
"Name": "CVE-2018-18483",
"NamespaceName": "debian:8",
"Description": "The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-18483",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-14333",
"NamespaceName": "debian:8",
"Description": "The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during \"readelf -a\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14333",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-19931",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-19931",
"Severity": "Negligible"
},
{
"Name": "CVE-2018-10373",
"NamespaceName": "debian:8",
"Description": "concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-10373",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-15022",
"NamespaceName": "debian:8",
"Description": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-15022",
"Severity": "Low"
},
{
"Name": "CVE-2017-16830",
"NamespaceName": "debian:8",
"Description": "The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-16830",
"Severity": "Low"
},
{
"Name": "CVE-2017-12453",
"NamespaceName": "debian:8",
"Description": "The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12453",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-7227",
"NamespaceName": "debian:8",
"Description": "GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\\0' termination of a name field in ldlex.l.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-7227",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-17985",
"NamespaceName": "debian:8",
"Description": "An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many 'P' characters.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-17985",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-14932",
"NamespaceName": "debian:8",
"Description": "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14932",
"Severity": "Low"
},
{
"Name": "CVE-2017-12799",
"NamespaceName": "debian:8",
"Description": "The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12799",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-10535",
"NamespaceName": "debian:8",
"Description": "The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a \"SECTION\" type that has a \"0\" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-10535",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-14930",
"NamespaceName": "debian:8",
"Description": "Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-14930",
"Severity": "Low"
},
{
"Name": "CVE-2017-9742",
"NamespaceName": "debian:8",
"Description": "The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9742",
"Severity": "Low"
},
{
"Name": "CVE-2017-9039",
"NamespaceName": "debian:8",
"Description": "GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9039",
"Severity": "Low"
},
{
"Name": "CVE-2017-12454",
"NamespaceName": "debian:8",
"Description": "The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12454",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-13710",
"NamespaceName": "debian:8",
"Description": "The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-13710",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-15023",
"NamespaceName": "debian:8",
"Description": "read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-15023",
"Severity": "Low"
},
{
"Name": "CVE-2018-7208",
"NamespaceName": "debian:8",
"Description": "In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-7208",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-12457",
"NamespaceName": "debian:8",
"Description": "The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12457",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-9755",
"NamespaceName": "debian:8",
"Description": "opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9755",
"Severity": "Low"
},
{
"Name": "CVE-2017-12451",
"NamespaceName": "debian:8",
"Description": "The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a crafted COFF image file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-12451",
"Severity": "Unknown"
},
{
"Name": "CVE-2017-15024",
"NamespaceName": "debian:8",
"Description": "find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-15024",
"Severity": "Low"
},
{
"Name": "CVE-2016-6131",
"NamespaceName": "debian:8",
"Description": "The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2016-6131",
"Severity": "Low"
},
{
"Name": "CVE-2018-7569",
"NamespaceName": "debian:8",
"Description": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-7569",
"Severity": "Unknown"
},
{
"Name": "CVE-2018-12934",
"NamespaceName": "debian:8",
"Description": "remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-12934",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-9745",
"NamespaceName": "debian:8",
"Description": "The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-9745",
"Severity": "Low"
},
{
"Name": "CVE-2019-17450",
"NamespaceName": "debian:8",
"Description": "find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2019-17450",
"Severity": "Negligible"
},
{
"Name": "CVE-2017-15225",
"NamespaceName": "debian:8",
"Description": "_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2017-15225",
"Severity": "Low"
},
{
"Name": "CVE-2018-12697",
"NamespaceName": "debian:8",
"Description": "A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.",
"Link": "https://security-tracker.debian.org/tracker/CVE-2018-12697",