Latest medium severity vulnerabilities for "gnu binutils" 2.28

Where

AND

Sort:

GNU binutilsLast updated 24 July 2024

Risk 32

Severity

5.5

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c.

1 / 2

First published (updated )

CVE-2017-9041

GNU binutilsLast updated 24 July 2024

Risk 32

Severity

5.5

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the bytegetlittleendian function in elfcomm.c, the getunwindsectionword function in readelf.c, and ARM unwind information that contains invalid word offsets.

1 / 2

First published (updated )

CVE-2017-9038

GNU binutilsLast updated 24 July 2024

Risk 32

Severity

5.5

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the getprogramheaders function in readelf.c.

1 / 2

First published (updated )

CVE-2017-9039

GNU binutilsLast updated 24 July 2024

Risk 32

Severity

5.5

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 2

Source: Ubuntu

First published (updated )

CVE-2017-9044

GNU binutilsNull Pointer Dereference

Risk 32

Severity

5.5

Null Pointer Dereference

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the processmipsspecific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.

1 / 2

First published (updated )

CVE-2017-9040