SB2018112746 - Gentoo update for Binutils
Published: November 27, 2018 Updated: February 10, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 25 secuirty vulnerabilities.
1) Infinite loop (CVE-ID: CVE-2017-14933)
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.
2) Buffer overflow (CVE-ID: CVE-2017-16826)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.
3) Buffer overflow (CVE-ID: CVE-2017-16827)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.
4) Out-of-bounds read (CVE-ID: CVE-2017-16828)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1. A remote attacker can perform a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.
5) Out-of-bounds read (CVE-ID: CVE-2017-16829)
The vulnerability allows a remote attacker to gain access to perform denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the elf-properties.c function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed file. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and crash the affected application.
6) Integer overflow (CVE-ID: CVE-2017-16830)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.
7) Integer overflow (CVE-ID: CVE-2017-16831)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.
8) Integer overflow (CVE-ID: CVE-2017-16832)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.
9) Out-of-bounds read (CVE-ID: CVE-2017-17080)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which. A remote attacker can perform a denial of service (bfd_getl32 heap-based buffer over-read and application crash) via a crafted object file, related to elfcore_grok_netbsd_procinfo, elfcore_grok_openbsd_procinfo, and elfcore_grok_nto_status.
10) Buffer overflow (CVE-ID: CVE-2017-17121)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section.
11) Heap-based buffer overflow (CVE-ID: CVE-2017-17122)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which. A remote attacker can use a crafted PE file. to trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
12) NULL pointer dereference (CVE-ID: CVE-2017-17123)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via a crafted COFF based file.
13) Heap-based buffer overflow (CVE-ID: CVE-2017-17124)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which. A remote attacker can use a crafted COFF binary. to trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
14) Out-of-bounds read (CVE-ID: CVE-2017-17125)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which. A remote attacker can perform a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file.
15) Buffer overflow (CVE-ID: CVE-2017-17126)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.
16) Integer overflow (CVE-ID: CVE-2018-6543)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the load_specific_debug_section function in GNU Binutilsdue to insufficient validation of user-supplied input. A remote attacker can submit a specially crafted Executable and Linkable Format (ELF) file, trigger integer overflow and cause the service to crash.
17) Memory corruption (CVE-ID: CVE-2018-6759)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the bfd_get_debug_link_info_1 function due to boundary error. A remote attacker can trigger memory corruption and cause the service to crash.
18) Out-of-bounds read (CVE-ID: CVE-2018-6872)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due to a segmentation violation in the Executable and Linkable Format (ELF) note parser. A remote attacker can trick the victim into the opening the specially crafted ELF file, trigger an out-of-bounds read condition and cause the service to crash.
19) Improper input validation (CVE-ID: CVE-2018-7208)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the coff_pointerize_aux function in the coffgen.c source code due to insufficient validation of an index. A remote attacker can create a specially crafted COFF file, trick the victim into opening it, trigger a segmentation fault and cause the service to crash.
20) Integer overflow (CVE-ID: CVE-2018-7568)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the parse_die function that is defined in the dwarf1.c source code file due to the improper processing of crafted Executable and Linkable Format (ELF) files that contain corrupted dwarf1 debug information. A remote attacker can send a specially crafted ELF file, trick the victim into opening it, trigger integer overflow and cause the service to crash.
21) Memory corruption (CVE-ID: CVE-2018-7569)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the dwarf2.c source code file due to the improper processing of crafted Executable and Linkable Format (ELF) files that contain a corrupted DWARF FORM block. A remote attacker can send a specially crafted ELF file, trick the victim into opening it, trigger integer overflow or underflow and cause the service to crash.
22) NULL pointer dereference (CVE-ID: CVE-2018-7570)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the assign_file_positions_for_non_load_sections function due to the improper processing of crafted Executable and Linkable Format (ELF) files that contain a RELRO segment that lacks a matching LOAD segment. A remote attacker can send a specially crafted ELF file, trick the victim into opening it, trigger NULL pointer dereference and cause the service to crash.
23) NULL pointer dereference (CVE-ID: CVE-2018-7642)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due to improper bounds checking when using the swap_std_reloc_in function, as defined in the aoutx.h source code file in the Binary File Descriptor (BFD) library. A remote attacker can submit a specially crafted ELF file, trigger NULL pointer dereference and cause the service to crash.
24) Integer overflow (CVE-ID: CVE-2018-7643)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the display_debug_ranges function due to the improper processing of crafted ELF files that contain DWARF information. A remote attacker can trick the victim into opening a specially crafted ELF file, trigger integer overflow and cause the service to crash.
25) Improper resource shutdown (CVE-ID: CVE-2018-8945)
The vulnerability allows a remote unauthenticated attacker to cause DoS condition on the target system.The weakness exists in the bfd_section_from_shdr function due to improper bounds checking. A remote attacker can submit a specially crafted ELF file and cause the service to crash.
Remediation
Install update from vendor's website.