Affected: Alpaquita:25: binutils, Alpaquita:stream: binutils, BellSoft Hardened Containers:25: binutils, BellSoft Hardened Containers:stream: binutils

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis.

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis.

binutils-2.47-1.1 on GA media

binutils: GNU Binutils out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds binutils: GNU Binutils Linker out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils prdbg.c tg_tag_type return value binutils: GNU Binutils out-of-bounds read binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c binutils: BinUtils: Denial of Service via crafted PE file binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c binutils: stack overflow in d_print_comp_inner() in cp-demangle.c binutils: BinUtils: Denial of Service via crafted PE file binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information binutils: Binutils objdump: Denial of Service via crafted DWARF debug information binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed h…

Affected: Ubuntu:24.04:LTS: binutils, Ubuntu:25.10: binutils

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis.

Ein lokaler Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.