High WID-SEC-2023-2165 18 CVEs

binutils: Mehrere Schwachstellen

Published Aug 23, 2023 · Updated Mar 14, 2024 · Revision 13 · de-DE

Vendor: amazon Vendor: Fedora Vendor: NETAPP Vendor: SUSE Vendor: Ubuntu Product: ActiveIQ Unified Manager Product: Linux Product: Linux Product: Linux Product: Linux 2 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder sonstige Auswirkungen zu verursachen.

Product

Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten

Vulnerabilities 18

Medium 5.5

CVE-2022-35205

An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows…

binutils binutils binutils Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2020-19724

A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a deni…

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2020-19726

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or wri…

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2020-21490

An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume …

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2020-35342

GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c…

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2021-46174

Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2022-35206

Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwa…

binutils Debian

Aug 22, 2023
Unscored —

CVE-2022-44840

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2022-45703

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2022-47007

An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause …

binutils binutils binutils Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-47008

An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attacke…

binutils binutils binutils Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-47010

An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a de…

binutils binutils binutils Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-47011

An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to ca…

binutils binutils binutils Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-47673

An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads…

binutils binutils gdb crash Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-47695

An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecifi…

binutils binutils Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2022-47696

An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecifi…

binutils binutils gdb crash Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_…

binutils binutils binutils Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_d…

binutils binutils gdb Debian Ubuntu Azure Linux

Aug 22, 2023

Revision history

2024-03-14 #13
Neue Updates von SUSE aufgenommen
2024-02-25 #12
Neue Updates von Ubuntu aufgenommen
2024-01-15 #11
Neue Updates von Ubuntu aufgenommen
2024-01-09 #10
Neue Updates von Amazon aufgenommen
2023-12-11 #9
Neue Updates von Ubuntu aufgenommen
2023-10-08 #8
Neue Updates von NetApp aufgenommen
2023-10-04 #7
Neue Updates von Ubuntu aufgenommen
2023-09-27 #6
Neue Updates von SUSE aufgenommen
2023-09-26 #5
Neue Updates von Fedora aufgenommen
2023-09-25 #4
Neue Updates von Fedora aufgenommen
2023-09-19 #3
Neue Updates von SUSE aufgenommen
2023-09-18 #2
Neue Updates von Ubuntu aufgenommen
2023-08-23 #1
Initiale Fassung

References

Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233930
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233934
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233943
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233949
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233958
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233969
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233975
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233980
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233984
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233988
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233992
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2233998
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2234003
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2234004
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2234012
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2234013
Red Hat Bugtracker vom 2023-08-23
https://bugzilla.redhat.com/show_bug.cgi?id=2234027
Ubuntu Security Notice USN-6381-1 vom 2023-09-18
https://ubuntu.com/security/notices/USN-6381-1
SUSE Security Update SUSE-SU-2023:3695-1 vom 2023-09-20
https://lists.suse.com/pipermail/sle-security-updates/2023-September/016227.html
Fedora Security Advisory FEDORA-2023-AAB127EE36 vom 2023-09-26
https://bodhi.fedoraproject.org/updates/FEDORA-2023-aab127ee36
Fedora Security Advisory FEDORA-2023-D94BE55511 vom 2023-09-26
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d94be55511
Fedora Security Advisory FEDORA-2023-8D0913F986 vom 2023-09-27
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8d0913f986
SUSE Security Update SUSE-SU-2023:3825-1 vom 2023-09-27
https://lists.suse.com/pipermail/sle-security-updates/2023-September/016367.html
Ubuntu Security Notice USN-6413-1 vom 2023-10-04
https://ubuntu.com/security/notices/USN-6413-1
NetApp Security Advisory NTAP-20231006-0009 vom 2023-10-06
https://security.netapp.com/advisory/ntap-20231006-0009/
Ubuntu Security Notice USN-6544-1 vom 2023-12-11
https://ubuntu.com/security/notices/USN-6544-1
Amazon Linux Security Advisory ALAS-2024-2401 vom 2024-01-10
https://alas.aws.amazon.com/AL2/ALAS-2024-2401.html
Ubuntu Security Notice USN-6581-1 vom 2024-01-15
https://ubuntu.com/security/notices/USN-6581-1
Ubuntu Security Notice USN-6655-1 vom 2024-02-26
https://ubuntu.com/security/notices/USN-6655-1
SUSE Security Update SUSE-SU-2024:0898-1 vom 2024-03-14
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018170.html
SUSE Security Update SUSE-SU-2024:0898-1 vom 2024-03-14
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018169.html
SUSE Security Update SUSE-SU-2024:0899-1 vom 2024-03-14
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018168.html