Most recent entries from all

ALSA-2023:2873 — Moderate: gcc-toolset-12-binutils security update

Affected: AlmaLinux:8: gcc-toolset-12-binutils, AlmaLinux:8: gcc-toolset-12-binutils-devel, AlmaLinux:8: gcc-toolset-12-binutils-gold

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.

Security Fix(es):

* binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-00576

BELL-CVE-2022-4285

Affected: Alpaquita:23: binutils, BellSoft Hardened Containers:23: binutils

certfr-2024-avi-0619 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2024-avi-0619

EUVD-2026-226014

fkie_cve-2022-4285

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

GHSA-qx33-qxjc-p36p

gsd-2022-4285

msrc_CVE-2022-4285 — An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version…

msrc_CVE-2022-4285

OESA-2023-1592 — binutils security update

Affected: openEuler:22.03-LTS: binutils

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files. Security Fix(es): An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.(CVE-2022-4285) GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48…

openSUSE-SU-2024:12717-1 — binutils-2.40-1.1 on GA media

binutils-2.40-1.1 on GA media

RHSA-2023:3269 — Red Hat Security Advisory: devtoolset-12-binutils security update

libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

RLSA-2023:2873 — Moderate: gcc-toolset-12-binutils security update

Affected: Rocky Linux:8: gcc-toolset-12-binutils

Security Fix(es):

* binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

SUSE-SU-2023:3695-1 — Security update for binutils

Security update for binutils

UBUNTU-CVE-2022-4285

Affected: Ubuntu:Pro:16.04:LTS: gdb, Ubuntu:16.04:LTS: binutils-avr, Ubuntu:Pro:18.04:LTS: gdb, Ubuntu:18.04:LTS: binutils-avr, Ubuntu:20.04:LTS: gdb, Ubuntu:20.04:LTS: binutils-avr, Ubuntu:22.04:LTS: binutils, Ubuntu:22.04:LTS: binutils-avr, Ubuntu:22.04:LTS: gdb, Ubuntu:24.04:LTS: binutils-avr and 2 more

WID-SEC-W-2022-2228 — binutils: Schwachstelle ermöglicht Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.