CVE-2014-8501

Description

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
6.122

Associated Vulnerability

VulnerabilityOS Platform
GNU Debugger (USN-3367-1) gdb_7.11.1-0ubuntu1~16.5_i386.debLinux
GNU Debugger (USN-3367-1) gdb_7.11.1-0ubuntu1~16.5_amd64.debLinux
GNU Debugger (USN-3367-1) gdb_7.7.1-0ubuntu5~14.04.3_i386.debLinux
GNU Debugger (USN-3367-1) gdb_7.7.1-0ubuntu5~14.04.3_amd64.debLinux
GNU Debugger (USN-3367-1) gdb_7.12.50.20170314-0ubuntu1.1_i386.debLinux
GNU Debugger (USN-3367-1) gdb_7.12.50.20170314-0ubuntu1.1_amd64.debLinux
binutils security update(DSA-3123-1) binutils_2.22-8+deb7u2_i386.debLinux
binutils-mingw-w64 security update(DSA-3123-2) binutils-mingw-w64_2.26-3+6.6_all.debLinux
(RHSA-2015:2079) Moderate: binutils security, bug fix, and enhancement update binutils-2.23.52.0.1-55.el7.x86_64.rpmLinux
(RHSA-2015:2079) Moderate: binutils security, bug fix, and enhancement update binutils-devel-2.23.52.0.1-55.el7.i686.rpmLinux
(RHSA-2015:2079) Moderate: binutils security, bug fix, and enhancement update binutils-devel-2.23.52.0.1-55.el7.x86_64.rpmLinux
(CESA-2015:2079) Moderate: binutils security, bug fix, and enhancement update binutils-2.23.52.0.1-55.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234