cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2022-47008,https://securityvulnerability.io/vulnerability/CVE-2022-47008,,"An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.",Gnu,Binutils,5.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-48063,https://securityvulnerability.io/vulnerability/CVE-2022-48063,,GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.,Gnu,Binutils,5.5,MEDIUM,0.0004900000058114529,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-47010,https://securityvulnerability.io/vulnerability/CVE-2022-47010,,"An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.",Gnu,Binutils,5.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-35206,https://securityvulnerability.io/vulnerability/CVE-2022-35206,,Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.,Gnu,Binutils,5.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-47673,https://securityvulnerability.io/vulnerability/CVE-2022-47673,Out-of-Bounds Read Vulnerability in Binutils by GNU,"A vulnerability has been identified in Binutils addr2line prior to version 2.39.3, located in the function parse_module. This issue involves multiple out-of-bounds reads which may lead to a denial of service or result in other unspecified impacts, thereby compromising system stability and security. Users of the affected versions are urged to update to mitigate potential risks and ensure system integrity.",Gnu,Binutils,7.8,HIGH,0.0007800000021234155,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2020-19724,https://securityvulnerability.io/vulnerability/CVE-2020-19724,,A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.,Gnu,Binutils,5.5,MEDIUM,0.0005000000237487257,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-47011,https://securityvulnerability.io/vulnerability/CVE-2022-47011,,"An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.",Gnu,Binutils,5.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-45703,https://securityvulnerability.io/vulnerability/CVE-2022-45703,Heap Buffer Overflow in Readelf Tool from GNU Binutils,"A heap buffer overflow vulnerability exists in the readelf utility of GNU Binutils prior to version 2.40. This issue is caused by improper handling in the display_debug_section function within the readelf.c source file. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service on affected systems, thereby compromising the security of applications using the binutils suite.",Gnu,Binutils,7.8,HIGH,0.0007099999929778278,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-48065,https://securityvulnerability.io/vulnerability/CVE-2022-48065,,GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.,Gnu,Binutils,5.5,MEDIUM,0.0006200000061653554,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-47695,https://securityvulnerability.io/vulnerability/CVE-2022-47695,Denial of Service Vulnerability in Binutils Objdump by Sourceware,"A vulnerability in Binutils objdump versions prior to 2.39.3 allows an attacker to trigger a denial of service. The flaw is located in the function 'bfd_mach_o_get_synthetic_symtab' within match-o.c, which can possibly lead to issues that disrupt normal operations. This vulnerability raises concerns for users relying on the affected versions of Binutils for processing object files.",Gnu,Binutils,7.8,HIGH,0.0007800000021234155,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-44840,https://securityvulnerability.io/vulnerability/CVE-2022-44840,Heap Buffer Overflow in Binutils Readelf Affects Sourceware,"A heap buffer overflow vulnerability exists in Binutils Readelf prior to version 2.40. This issue arises from the function find_section_in_set in readelf.c, which may allow an attacker to exploit memory corruption. Proper handling of dynamic memory allocation is crucial to prevent potential impacts on system integrity and security. Implementing updates and patches is essential to mitigate this risk.",Gnu,Binutils,7.8,HIGH,0.0007800000021234155,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-48064,https://securityvulnerability.io/vulnerability/CVE-2022-48064,,GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.,Gnu,Binutils,5.5,MEDIUM,0.0006500000017695129,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-47007,https://securityvulnerability.io/vulnerability/CVE-2022-47007,,"An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.",Gnu,Binutils,5.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-47696,https://securityvulnerability.io/vulnerability/CVE-2022-47696,Denial of Service Vulnerability in Binutils Objdump by Sourceware,"A vulnerability has been identified in Binutils objdump versions prior to 2.39.3, which allows attackers to exploit the function compare_symbols. This exploitation can lead to denial of service or other unspecified impacts, potentially disrupting services that rely on this tool.",Gnu,Binutils,7.8,HIGH,0.0007800000021234155,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2020-21490,https://securityvulnerability.io/vulnerability/CVE-2020-21490,,An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.,Gnu,Binutils,5.5,MEDIUM,0.0004900000058114529,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2020-19726,https://securityvulnerability.io/vulnerability/CVE-2020-19726,Memory Manipulation Vulnerability in Binutils from Sourceware,"A significant vulnerability has been identified in the Binutils software, specifically within libbfd.c version 2.36. This issue can allow attackers to exploit auxiliary symbol data, potentially enabling them to read from or write to system memory. This could lead to unauthorized access or manipulation of sensitive data and may result in denial of service, impacting system stability and availability.",Gnu,Binutils,8.8,HIGH,0.0019000000320374966,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2021-46174,https://securityvulnerability.io/vulnerability/CVE-2021-46174,Heap-based Buffer Overflow in Binutils Objdump by GNU,"A heap-based buffer overflow vulnerability exists in the bfd_getl32 function of Binutils objdump 3.37. This vulnerability allows an attacker to potentially manipulate memory allocation, leading to possible data corruption or denial of service. Users of the affected versions should apply appropriate security measures to mitigate risks.",Gnu,Binutils,7.5,HIGH,0.0006300000241026282,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2020-35342,https://securityvulnerability.io/vulnerability/CVE-2020-35342,Uninitialized Heap Vulnerability in GNU Binutils Affects Information Security,"An uninitialized heap vulnerability exists in the GNU Binutils prior to version 2.34, specifically in the tic4x_print_cond function within the opcodes/tic4x-dis.c file. This flaw could potentially allow attackers to exploit the state of heap memory, leading to unauthorized information disclosure. Attackers may leverage this weakness to obtain sensitive data that should remain inaccessible, highlighting the need for timely updates and mitigation measures.",Gnu,Binutils,7.5,HIGH,0.0018100000452250242,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2022-35205,https://securityvulnerability.io/vulnerability/CVE-2022-35205,,"An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.",Gnu,Binutils,5.5,MEDIUM,0.0005000000237487257,false,false,false,false,,false,false,2023-08-22T00:00:00.000Z,0 CVE-2021-32256,https://securityvulnerability.io/vulnerability/CVE-2021-32256,,"An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.",Gnu,Binutils,6.5,MEDIUM,0.0007800000021234155,false,false,false,false,,false,false,2023-07-18T00:00:00.000Z,0 CVE-2023-1972,https://securityvulnerability.io/vulnerability/CVE-2023-1972,,A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.,Gnu,binutils,6.5,MEDIUM,0.0012100000167265534,false,false,false,false,,false,false,2023-05-17T00:00:00.000Z,0 CVE-2023-1579,https://securityvulnerability.io/vulnerability/CVE-2023-1579,Heap Based Buffer Overflow in Binutils-GDB Product by GNU,"A vulnerability has been identified in the Binutils-GDB package, specifically within the bfd_getl64 function in the libbfd.c file. This flaw can lead to a heap-based buffer overflow, potentially allowing for arbitrary code execution or denial of service conditions. It is critical for users of affected versions to patch their systems to mitigate potential exploitation of this vulnerability. Reference advisories for further guidance on preventative measures.",Gnu,binutils,7.8,HIGH,0.0008099999977275729,false,false,false,false,,false,false,2023-04-03T23:15:00.000Z,0 CVE-2022-4285,https://securityvulnerability.io/vulnerability/CVE-2022-4285,,An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.,Gnu,Binutils,5.5,MEDIUM,0.0007600000244565308,false,false,false,false,,false,false,2023-01-27T00:00:00.000Z,0 CVE-2017-15225,https://securityvulnerability.io/vulnerability/CVE-2017-15225,,"_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.",Gnu,Binutils,5.5,MEDIUM,0.0012000000569969416,false,false,false,false,,false,false,2022-10-03T16:23:33.000Z,0 CVE-2017-12450,https://securityvulnerability.io/vulnerability/CVE-2017-12450,,"The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.",Gnu,Binutils,7.8,HIGH,0.003470000112429261,false,false,false,false,,false,false,2022-10-03T16:23:18.000Z,0