Red Hat Security AdvisoryRHSA-2015:2079
binutils security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) binutils-2.23.52.0.1-55.el7
- Red Hat Enterprise Linux Client Optional (v. 7) binutils-devel-2.23.52.0.1-55.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) binutils-2.23.52.0.1-55.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) binutils-devel-2.23.52.0.1-55.el7
- Red Hat Enterprise Linux Server (v. 7) binutils-2.23.52.0.1-55.el7, binutils-devel-2.23.52.0.1-55.el7, binutils-devel-2.23.52.0.1-55.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) binutils-2.23.52.0.1-55.el7, binutils-devel-2.23.52.0.1-55.el7
Fixes 8 records
Priority MEDIUM 43
The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an EL…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07486 · Published 2014-12-09 · Partial fix CWE-94
Priority MEDIUM 42
Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted f…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06202 · Published 2014-12-09 · Partial fix CWE-119
Priority MEDIUM 42
Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted i…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06202 · Published 2014-12-09 · Partial fix CWE-119
Priority MEDIUM 41
Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a t…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04906 · Published 2014-12-09 · Partial fix CWE-119
Priority MEDIUM 41
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0516 · Published 2014-12-09 · Partial fix CWE-119
Priority LOW 31
The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended nam…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05207 · Published 2015-01-15 · Partial fix CWE-119
Priority LOW 31
The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05081 · Published 2014-12-09 · Partial fix CWE-119
Priority LOW 19
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a ..
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.0104 · Published 2014-12-09 · Partial fix CWE-22