
CVE-2017-12457 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12457
04 Aug 2017 — The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file. La función bfd_make_section_with_flags en section.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una desreferencia del puntero NULL mediante un archi... • https://sourceware.org/bugzilla/show_bug.cgi?id=21840 • CWE-476: NULL Pointer Dereference •

CVE-2017-12453 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12453
04 Aug 2017 — The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file. La función _bfd_vms_slurp_eeom en libbfd.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites med... • https://sourceware.org/bugzilla/show_bug.cgi?id=21813 • CWE-125: Out-of-bounds Read •

CVE-2017-12451 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12451
04 Aug 2017 — The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a crafted COFF image file. La función _bfd_xcoff_read_ar_hdr en bfd/coff-rs6000.c y bfd/coff64-rs6000.c en la librería Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remoto... • https://sourceware.org/bugzilla/show_bug.cgi?id=21786 • CWE-125: Out-of-bounds Read •

CVE-2017-12448 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12448
04 Aug 2017 — The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c. La función bfd_cache_close en b... • https://sourceware.org/bugzilla/show_bug.cgi?id=21787 • CWE-416: Use After Free •

CVE-2017-12459 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12459
04 Aug 2017 — The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file. La función bfd_mach_o_read_symtab_strtab en bfd/mach-o.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos ... • https://sourceware.org/bugzilla/show_bug.cgi?id=21840 • CWE-787: Out-of-bounds Write •

CVE-2017-12455 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12455
04 Aug 2017 — The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file. La función evax_bfd_print_emh en vms-alpha.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites... • https://sourceware.org/bugzilla/show_bug.cgi?id=21840 • CWE-125: Out-of-bounds Read •

CVE-2017-12456 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12456
04 Aug 2017 — The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file. La función read_symbol_stabs_debugging_info en rddbg.c en GNU Binutils 2.29 y anteriores permite que atacantes remotos provoquen una lectura de memoria dinámica fuera de límites mediante un archivo binario manipulado. USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16... • https://security.gentoo.org/glsa/201801-01 • CWE-125: Out-of-bounds Read •

CVE-2017-12450 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12450
04 Aug 2017 — The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file. La función alpha_vms_object_p en bfd/vms-alpha.c de la librería Binary File Descriptor (BFD), también llamada libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una escri... • https://sourceware.org/bugzilla/show_bug.cgi?id=21813 • CWE-787: Out-of-bounds Write •

CVE-2017-12454 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12454
04 Aug 2017 — The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file. La función _bfd_vms_slurp_egsd en bfd/vms-alpha.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lectura de memoria arbitraria median... • https://sourceware.org/bugzilla/show_bug.cgi?id=21813 • CWE-125: Out-of-bounds Read •

CVE-2017-12452 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-12452
04 Aug 2017 — The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file. La función bfd_mach_o_i386_canonicalize_one_reloc en bfd/mach-o-i386.c en la librería Binary File Descriptor (BFD), conocida como libbfd, tal y como se distribuye en GNU Binutils 2.29 y anteriores, permite que atacantes remotos provoquen una lec... • https://sourceware.org/bugzilla/show_bug.cgi?id=21813 • CWE-125: Out-of-bounds Read •