VulnerableCode Package Details - pkg:alpm/archlinux/binutils@2.28.0-4

Search for packages

Vulnerability	Summary	Fixed by
VCID-2g37-m7h8-aaan Aliases: CVE-2017-9041	GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-8avx-j583-aaap Aliases: CVE-2017-9043	readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-j35t-2dc1-aaar Aliases: CVE-2017-7209	The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-kbr7-tbru-aaaq Aliases: CVE-2017-9042	readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-p85y-jrz7-aaab Aliases: CVE-2017-9040	GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-pdrv-qfbp-aaan Aliases: CVE-2017-6966	readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-rf1t-p1hp-aaar Aliases: CVE-2017-9044	The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-szyg-h58d-aaas Aliases: CVE-2017-6969	readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-y3jg-d2j2-aaar Aliases: CVE-2017-6965	readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-ysqh-yybj-aaac Aliases: CVE-2017-9039	GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-yt2h-eyr6-aaaa Aliases: CVE-2017-7210	objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.	2.29.0-1 Affected by 0 other vulnerabilities.
VCID-zg4d-pabs-aaap Aliases: CVE-2017-9038	GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.	2.29.0-1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-2g37-m7h8-aaan
Aliases:
CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.