CVE-2014-8484

The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
References
Link Resource
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html Third Party Advisory
http://openwall.com/lists/oss-security/2014/10/23/5 Mailing List
http://secunia.com/advisories/62241 Permissions Required Third Party Advisory
http://secunia.com/advisories/62746 Permissions Required Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 Broken Link
http://www.openwall.com/lists/oss-security/2014/10/26/2 Mailing List Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/70714
http://www.ubuntu.com/usn/USN-2496-1 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1156272 Broken Link
https://security.gentoo.org/glsa/201612-24
https://sourceware.org/bugzilla/show_bug.cgi?id=17509 Issue Tracking
https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html Third Party Advisory
http://openwall.com/lists/oss-security/2014/10/23/5 Mailing List
http://secunia.com/advisories/62241 Permissions Required Third Party Advisory
http://secunia.com/advisories/62746 Permissions Required Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 Broken Link
http://www.openwall.com/lists/oss-security/2014/10/26/2 Mailing List Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/70714
http://www.ubuntu.com/usn/USN-2496-1 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1156272 Broken Link
https://security.gentoo.org/glsa/201612-24
https://sourceware.org/bugzilla/show_bug.cgi?id=17509 Issue Tracking
https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-12-09 23:59

Updated : 2025-04-12 10:46


NVD link : CVE-2014-8484

Mitre link : CVE-2014-8484

CVE.ORG link : CVE-2014-8484


JSON object : View

Products Affected

canonical

  • ubuntu_linux

fedoraproject

  • fedora

gnu

  • binutils
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer