The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 02:19
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - Third Party Advisory | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - Third Party Advisory | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - Third Party Advisory | |
References | () http://openwall.com/lists/oss-security/2014/10/23/5 - Mailing List | |
References | () http://secunia.com/advisories/62241 - Permissions Required, Third Party Advisory | |
References | () http://secunia.com/advisories/62746 - Permissions Required, Third Party Advisory | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - Broken Link | |
References | () http://www.openwall.com/lists/oss-security/2014/10/26/2 - Mailing List, Third Party Advisory | |
References | () http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - | |
References | () http://www.securityfocus.com/bid/70714 - | |
References | () http://www.ubuntu.com/usn/USN-2496-1 - Third Party Advisory | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=1156272 - Broken Link | |
References | () https://security.gentoo.org/glsa/201612-24 - | |
References | () https://sourceware.org/bugzilla/show_bug.cgi?id=17509 - Issue Tracking | |
References | () https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f - |
07 Nov 2023, 02:22
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2014-12-09 23:59
Updated : 2024-11-21 02:19
NVD link : CVE-2014-8484
Mitre link : CVE-2014-8484
CVE.ORG link : CVE-2014-8484
JSON object : View
Products Affected
gnu
- binutils
canonical
- ubuntu_linux
fedoraproject
- fedora
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer