CVE-2014-8484

The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
References
Link Resource
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html Third Party Advisory
http://openwall.com/lists/oss-security/2014/10/23/5 Mailing List
http://secunia.com/advisories/62241 Permissions Required Third Party Advisory
http://secunia.com/advisories/62746 Permissions Required Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 Broken Link
http://www.openwall.com/lists/oss-security/2014/10/26/2 Mailing List Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/70714
http://www.ubuntu.com/usn/USN-2496-1 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1156272 Broken Link
https://security.gentoo.org/glsa/201612-24
https://sourceware.org/bugzilla/show_bug.cgi?id=17509 Issue Tracking
https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html Third Party Advisory
http://openwall.com/lists/oss-security/2014/10/23/5 Mailing List
http://secunia.com/advisories/62241 Permissions Required Third Party Advisory
http://secunia.com/advisories/62746 Permissions Required Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 Broken Link
http://www.openwall.com/lists/oss-security/2014/10/26/2 Mailing List Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/70714
http://www.ubuntu.com/usn/USN-2496-1 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1156272 Broken Link
https://security.gentoo.org/glsa/201612-24
https://sourceware.org/bugzilla/show_bug.cgi?id=17509 Issue Tracking
https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

History

21 Nov 2024, 02:19

Type Values Removed Values Added
References () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - Third Party Advisory
References () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - Third Party Advisory
References () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - Third Party Advisory
References () http://openwall.com/lists/oss-security/2014/10/23/5 - Mailing List () http://openwall.com/lists/oss-security/2014/10/23/5 - Mailing List
References () http://secunia.com/advisories/62241 - Permissions Required, Third Party Advisory () http://secunia.com/advisories/62241 - Permissions Required, Third Party Advisory
References () http://secunia.com/advisories/62746 - Permissions Required, Third Party Advisory () http://secunia.com/advisories/62746 - Permissions Required, Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - Broken Link () http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - Broken Link
References () http://www.openwall.com/lists/oss-security/2014/10/26/2 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2014/10/26/2 - Mailing List, Third Party Advisory
References () http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - () http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html -
References () http://www.securityfocus.com/bid/70714 - () http://www.securityfocus.com/bid/70714 -
References () http://www.ubuntu.com/usn/USN-2496-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-2496-1 - Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=1156272 - Broken Link () https://bugzilla.redhat.com/show_bug.cgi?id=1156272 - Broken Link
References () https://security.gentoo.org/glsa/201612-24 - () https://security.gentoo.org/glsa/201612-24 -
References () https://sourceware.org/bugzilla/show_bug.cgi?id=17509 - Issue Tracking () https://sourceware.org/bugzilla/show_bug.cgi?id=17509 - Issue Tracking
References () https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f - () https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f -

07 Nov 2023, 02:22

Type Values Removed Values Added
References
  • {'url': 'https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=bd25671c6f202c4a5108883caa2adb24ff6f361f', 'name': 'https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=bd25671c6f202c4a5108883caa2adb24ff6f361f', 'tags': ['Patch', 'Issue Tracking'], 'refsource': 'CONFIRM'}
  • () https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f -

Information

Published : 2014-12-09 23:59

Updated : 2024-11-21 02:19


NVD link : CVE-2014-8484

Mitre link : CVE-2014-8484

CVE.ORG link : CVE-2014-8484


JSON object : View

Products Affected

gnu

  • binutils

canonical

  • ubuntu_linux

fedoraproject

  • fedora
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer