binutils (SUSE:Linux Enterprise Server 12 SP2-BCL) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP2-BCL package binutils, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (101)

• CVE-2014-9939 — CVSS 9.8 (critical): ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
• CVE-2017-7226 — CVSS 9.1 (critical): The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable…
• CVE-2017-6969 — CVSS 9.1 (critical): readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can…
• CVE-2017-16826 — CVSS 7.8 (high): The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2017-16827 — CVSS 7.8 (high): The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2017-16828 — CVSS 7.8 (high): The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow…
• CVE-2017-16829 — CVSS 7.8 (high): The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in…
• CVE-2017-16830 — CVSS 7.8 (high): The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms…
• CVE-2017-16831 — CVSS 7.8 (high): coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol…
• CVE-2018-18483 — CVSS 7.8 (high): The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of…
• CVE-2017-16832 — CVSS 7.8 (high): The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2021-45078 — CVSS 7.8 (high): stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow)…
• CVE-2017-15996 — CVSS 7.8 (high): elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly…
• CVE-2021-20294 — CVSS 7.8 (high): A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could…
• CVE-2019-9077 — CVSS 7.8 (high): An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS…
• CVE-2019-9075 — CVSS 7.8 (high): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based…
• CVE-2017-9746 — CVSS 7.8 (high): The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and…
• CVE-2017-9747 — CVSS 7.8 (high): The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28…
• CVE-2017-9748 — CVSS 7.8 (high): The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28…
• CVE-2017-9750 — CVSS 7.8 (high): opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of…
• CVE-2017-9755 — CVSS 7.8 (high): opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a…
• CVE-2017-9756 — CVSS 7.8 (high): The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service…
• CVE-2018-1000876 — CVSS 7.8 (high): binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_d…
• CVE-2019-1010180 — CVSS 7.8 (high): GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and…
• CVE-2018-7643 — CVSS 7.8 (high): The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow…
• CVE-2018-7208 — CVSS 7.8 (high): In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2018-6543 — CVSS 7.8 (high): In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()`…
• CVE-2018-6323 — CVSS 7.8 (high): The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has…
• CVE-2018-19931 — CVSS 7.8 (high): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a…
• CVE-2017-8396 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1…
• CVE-2021-3530 — CVSS 7.5 (high): A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted…
• CVE-2017-7304 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8)…
• CVE-2017-8392 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8…
• CVE-2017-8393 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read…
• CVE-2017-8394 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due…
• CVE-2017-7223 — CVSS 7.5 (high): GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from…
• CVE-2017-7225 — CVSS 7.5 (high): The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name…
• CVE-2017-15938 — CVSS 7.5 (high): dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die…
• CVE-2017-7300 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in…
• CVE-2017-7301 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in…
• CVE-2017-7302 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in…
• CVE-2017-7303 — CVSS 7.5 (high): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4)…
• CVE-2019-17451 — CVSS 6.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer…
• CVE-2021-3826 — CVSS 6.5 (medium): Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of…
• CVE-2019-17450 — CVSS 6.5 (medium): find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows…
• CVE-2018-10373 — CVSS 6.5 (medium): concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote…
• CVE-2021-20197 — CVSS 6.3 (medium): There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip…
• CVE-2022-38533 — CVSS 5.5 (medium): In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in…
• CVE-2018-18484 — CVSS 5.5 (medium): An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++…
• CVE-2018-18605 — CVSS 5.5 (medium): A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD)…
• CVE-2018-18606 — CVSS 5.5 (medium): An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed…
• CVE-2018-18607 — CVSS 5.5 (medium): An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU…
• CVE-2018-17985 — CVSS 5.5 (medium): An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused…
• CVE-2018-19932 — CVSS 5.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an…
• CVE-2018-20623 — CVSS 5.5 (medium): In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in…
• CVE-2018-20651 — CVSS 5.5 (medium): A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka…
• CVE-2018-20671 — CVSS 5.5 (medium): load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a…
• CVE-2018-17360 — CVSS 5.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. a heap-based buffer…
• CVE-2018-17359 — CVSS 5.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory…
• CVE-2018-6759 — CVSS 5.5 (medium): The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2018-6872 — CVSS 5.5 (medium): The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows…
• CVE-2018-17358 — CVSS 5.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory…
• CVE-2018-7568 — CVSS 5.5 (medium): The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows…
• CVE-2018-7569 — CVSS 5.5 (medium): dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a…
• CVE-2018-7570 — CVSS 5.5 (medium): The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed…
• CVE-2018-7642 — CVSS 5.5 (medium): The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30…
• CVE-2018-10535 — CVSS 5.5 (medium): The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30…
• CVE-2018-8945 — CVSS 5.5 (medium): The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30…
• CVE-2018-10534 — CVSS 5.5 (medium): The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as…
• CVE-2019-1010204 — CVSS 5.5 (medium): GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison…
• CVE-2019-12972 — CVSS 5.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a…
• CVE-2019-14250 — CVSS 5.5 (medium): An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not…
• CVE-2019-14444 — CVSS 5.5 (medium): apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation…
• CVE-2018-10372 — CVSS 5.5 (medium): process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and…
• CVE-2017-8421 — CVSS 5.5 (medium): The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2019-9074 — CVSS 5.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an…
• CVE-2017-7299 — CVSS 5.5 (medium): The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the…
• CVE-2017-7224 — CVSS 5.5 (medium): The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt…
• CVE-2020-16590 — CVSS 5.5 (medium): A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as…
• CVE-2020-16591 — CVSS 5.5 (medium): A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in…
• CVE-2020-16592 — CVSS 5.5 (medium): A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as…
• CVE-2020-16593 — CVSS 5.5 (medium): A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2017-6966 — CVSS 5.5 (medium): readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an…
• CVE-2017-6965 — CVSS 5.5 (medium): readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations…
• CVE-2017-15939 — CVSS 5.5 (medium): dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a…
• CVE-2021-46195 — CVSS 5.5 (medium): GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows…
• CVE-2022-27943 — CVSS 5.5 (medium): libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
• CVE-2018-18309 — CVSS 5.5 (medium): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory…
• CVE-2020-16599 — CVSS 5.5 (medium): A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
• CVE-2020-35493 — CVSS 5.5 (medium): A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap…
• CVE-2020-35496 — CVSS 5.5 (medium): There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file…
• CVE-2020-35507 — CVSS 5.5 (medium): There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able…
• CVE-2017-7210 — CVSS 5.5 (medium): objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS…
• CVE-2021-20284 — CVSS 5.5 (medium): A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due…
• CVE-2017-7209 — CVSS 5.5 (medium): The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt…
• CVE-2020-35448 — CVSS 3.3 (low): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based…
• CVE-2020-16598: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation…
• CVE-2022-38127: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation…
• CVE-2021-3648: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation duplicate of…
• CVE-2022-38126: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation…
• CVE-2021-3487: Rejected reason: Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binuti…