Search CVE reports
11 – 20 of 32 results
Some fixes available 9 of 11
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.
2 affected packages
binutils, gdb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| binutils | — | Fixed | Fixed | Not affected | Not affected |
| gdb | — | Not affected | Fixed | Fixed | Fixed |
Some fixes available 5 of 20
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.
3 affected packages
binutils, binutils-avr, gdb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| binutils | Not affected | Not affected | Fixed | Not affected | Not affected |
| binutils-avr | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gdb | Not affected | Not affected | Fixed | Fixed | Fixed |
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
51 affected packages
gcc-3.3, gcc-4.4, gcc-4.6, gcc-4.7, gcc-4.8...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gcc-3.3 | Not in release | Not affected | Not affected | Not affected | Not affected |
| gcc-4.4 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.6 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.7 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8 | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-4.9 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-5 | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-6 | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-7 | Not in release | Not in release | Not in release | Not affected | Not affected |
| gcc-8 | Not in release | Not in release | Not in release | Not affected | Not affected |
| gcc-9 | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-10 | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-11 | Vulnerable | Vulnerable | Vulnerable | Not in release | Not in release |
| gcc-5-cross | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-6-cross | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-6-cross-ports | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-7-cross | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-7-cross-ports | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-8-cross | Not in release | Not in release | Not in release | Not affected | Not affected |
| gcc-8-cross-ports | Not in release | Not in release | Not in release | Not affected | Not affected |
| gcc-9-cross | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-9-cross-ports | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-snapshot | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-i686-linux-android | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.7-armel-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.7-armhf-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-arm64-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-armhf-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-powerpc-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-ppc64el-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-arm-linux-androideabi | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-arm-none-eabi | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-avr | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-defaults | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-defaults-arm64-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-armel-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-armhf-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-powerpc-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-ppc64el-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-h8300-hms | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-m68hc1x | Not in release | Not in release | Not affected | Not affected | Not affected |
| gcc-mingw-w64 | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-msp430 | Not in release | Not in release | Not affected | Not affected | Not affected |
| gcc-opt | Not affected | Not affected | Not affected | Not affected | Not affected |
| gccgo-4.9 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gccgo-6 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-12 | Not affected | Not affected | Not affected | Not in release | Not in release |
| gcc-13 | Not affected | Not affected | Not in release | Not in release | Not in release |
| libiberty | Not affected | Not affected | Vulnerable | Not affected | Not affected |
| gdb | Not affected | Not affected | Not affected | Not affected | Needs evaluation |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |
libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
52 affected packages
gcc-3.3, gcc-4.4, gcc-4.6, gcc-4.7, gcc-4.8...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gcc-3.3 | Not in release | Not affected | Not affected | Not affected | Not affected |
| gcc-4.4 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.6 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.7 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8 | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-4.9 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-5 | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-6 | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-7 | Not in release | Not in release | Not in release | Not affected | Not affected |
| gcc-8 | Not in release | Not in release | Not in release | Not affected | Not affected |
| gcc-9 | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-10 | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-11 | Vulnerable | Vulnerable | Vulnerable | Not in release | Not in release |
| gcc-5-cross | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-6-cross | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-6-cross-ports | Not in release | Not in release | Not in release | Not in release | Not affected |
| gcc-7-cross | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| gcc-7-cross-ports | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| gcc-8-cross | Not in release | Not in release | Not in release | Needs evaluation | Needs evaluation |
| gcc-8-cross-ports | Not in release | Not in release | Not in release | Not affected | Not affected |
| gcc-9-cross | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-9-cross-ports | Not in release | Not affected | Not affected | Not affected | Not in release |
| gcc-snapshot | Not affected | Not affected | Vulnerable | Needs evaluation | Not affected |
| gcc-i686-linux-android | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.7-armel-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.7-armhf-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-arm64-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-armhf-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-powerpc-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-4.8-ppc64el-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-arm-linux-androideabi | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-arm-none-eabi | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gcc-avr | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gcc-defaults | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-defaults-arm64-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-armel-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-armhf-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-powerpc-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-defaults-ppc64el-cross | Not in release | Not in release | Not in release | Not in release | Not in release |
| gcc-h8300-hms | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gcc-m68hc1x | Not in release | Not in release | Needs evaluation | Needs evaluation | Needs evaluation |
| gcc-mingw-w64 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gcc-msp430 | Not in release | Not in release | Needs evaluation | Needs evaluation | Needs evaluation |
| gcc-opt | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gccgo-4.9 | Not in release | Not in release | Not in release | Not in release | Not in release |
| gccgo-6 | Not in release | Not in release | Not in release | Not in release | Not in release |
| binutils | Not affected | Not affected | Vulnerable | Not affected | Not affected |
| libiberty | Not affected | Not affected | Vulnerable | Not affected | Not affected |
| crash | Not affected | Not affected | Not affected | Not affected | Not affected |
| gdb | Not affected | Not affected | Vulnerable | Not affected | Not affected |
| gcc-12 | Vulnerable | Vulnerable | Vulnerable | Not in release | Not in release |
| gcc-13 | Not affected | Not affected | Not in release | Not in release | Not in release |
Some fixes available 1 of 6
A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.
3 affected packages
libiberty, binutils, gdb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libiberty | Not affected | Not affected | Vulnerable | Not affected | Not affected |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |
| gdb | Not affected | Not affected | Fixed | Not affected | Not affected |
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open...
1 affected package
gdb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gdb | Not affected | Not affected | Not affected | Not affected | Vulnerable |
GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This...
1 affected package
gdb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gdb | Not affected | Not affected | Not affected | Not affected | Vulnerable |
Some fixes available 1 of 4
ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
2 affected packages
gdb, binutils
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gdb | Not affected | Not affected | Not affected | Not affected | Not affected |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 8 of 107
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.
11 affected packages
libiberty, valgrind, ht, gcc-h8300-hms, gdb...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libiberty | Not affected | Not affected | Not affected | Not affected | Not affected |
| valgrind | Not affected | Not affected | Not affected | Not affected | Not affected |
| ht | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| gdb | Not affected | Not affected | Not affected | Not affected | Not affected |
| gccxml | Not in release | Not in release | Not in release | Not in release | Not in release |
| binutils-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| gcc-arm-none-eabi | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| nescc | Not in release | Not in release | Vulnerable | Vulnerable | Vulnerable |
| sdcc | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 8 of 107
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.
11 affected packages
libiberty, valgrind, ht, gcc-h8300-hms, gdb...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libiberty | Not affected | Not affected | Not affected | Not affected | Not affected |
| valgrind | Not affected | Not affected | Not affected | Not affected | Not affected |
| ht | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| gdb | Not affected | Not affected | Not affected | Not affected | Not affected |
| gccxml | Not in release | Not in release | Not in release | Not in release | Not in release |
| binutils-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| gcc-arm-none-eabi | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| nescc | Not in release | Not in release | Vulnerable | Vulnerable | Vulnerable |
| sdcc | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |