
CVE-2017-9752 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-9752
19 Jun 2017 — bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during "objdump -D" execution. En el archivo bfd/vms-alpha.c en la biblioteca Binary File Descriptor (BFD) (también se conoce como libb... • http://www.securityfocus.com/bid/99122 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-9746 – GNU binutils - 'disassemble_bytes' Heap Overflow
https://notcve.org/view.php?id=CVE-2017-9746
19 Jun 2017 — The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution. La función disassemble_bytes en el archivo objdump.c en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de ... • https://packetstorm.news/files/id/143047 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-9754 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-9754
19 Jun 2017 — The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. La función process_otr en el archivo bfd/versados.c en la biblioteca Binary File Descriptor (BF... • http://www.securityfocus.com/bid/99125 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-9749 – GNU binutils - 'decode_pseudodbg_assert_0' Buffer Overflow
https://notcve.org/view.php?id=CVE-2017-9749
19 Jun 2017 — The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Las macros *regs* en el archivo opcodes/bfin-dis.c en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bloqueo de aplicación) o posiblemente ten... • https://packetstorm.news/files/id/143049 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-9747 – GNU binutils - 'bfd_get_string' Stack Buffer Overflow
https://notcve.org/view.php?id=CVE-2017-9747
19 Jun 2017 — The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug. La función ieee_archive_p en el archivo bfd/eee.c en la biblioteca Binary File Descripto... • https://packetstorm.news/files/id/143048 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-9755 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-9755
19 Jun 2017 — opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. En el archivo opcodes/i386-dis.c en GNU Binutils versión 2.28, no considera el número de registros para el modo bnd, lo que permite a los atacantes remotos causar una denega... • http://www.securityfocus.com/bid/99124 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-9743
https://notcve.org/view.php?id=CVE-2017-9743
19 Jun 2017 — The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. La función print_insn_score32 en el archivo opcodes/score7-dis.c:552 en GNU Binutils versión 2.28, permite a los atacantes remotos causar una denegación de servicio (desbordamiento de búfer y bl... • http://www.securityfocus.com/bid/99106 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-9041 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-9041
18 May 2017 — GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c. GNU Binutils 2.28 permite que atacantes remotos provoquen una denegación de servicio (sobrelectura de búfer basada en memoria dinámica o heap y cierre inesperado de la aplicación) mediante un archivo ELF manipulado. Esto está relacionado con la gestión incorrecta de MIPS GOT en la... • http://www.securityfocus.com/bid/98598 • CWE-125: Out-of-bounds Read •

CVE-2017-9044 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-9044
18 May 2017 — The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file. La función print_symbol_for_build_attribute en readelf.c en GNU Binutils 2017-04-12 permite a los atacantes remotos provocar una denegación de servicio (lectura inválida y SEGV) mediante un archivo ELF manipulado. USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubu... • http://www.securityfocus.com/bid/98587 • CWE-125: Out-of-bounds Read •

CVE-2017-9040 – Ubuntu Security Notice USN-4336-2
https://notcve.org/view.php?id=CVE-2017-9040
18 May 2017 — GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt. GNU Binutils 2017-04-03 permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL y cierre inesperado de la aplicación). Esto está relacionado con la función process_mips_specific en readelf.c, mediante un archivo... • http://www.securityfocus.com/bid/98579 • CWE-476: NULL Pointer Dereference •