The remote host is affected by the vulnerability described in GLSA-201801-01 (Binutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Binutils. Please review       the referenced CVE identifiers for details.
  Impact :

    A remote attacker, by enticing a user to compile/execute a specially       crafted ELF, tekhex, PE, or binary file, could possibly cause a Denial of       Service condition.
  Workaround :

    There are no known workarounds at this time.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary     (CVE-2017-9756)

  - The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of     service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted     binary file. (CVE-2017-12799)

  - The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a     denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a     crafted binary file, as demonstrated by mishandling of this file during objdump -D execution.
    (CVE-2017-9742)

  - The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers     to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other     impact via a crafted binary file, as demonstrated by mishandling of this file during objdump -D     execution. (CVE-2017-9743)

  - The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka     libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer     overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as     demonstrated by mishandling of this file during objdump -D execution. (CVE-2017-9744)

  - The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka     libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer     overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as     demonstrated by mishandling of this file during objdump -D execution. (CVE-2017-9745)

  - The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial     of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted     binary file, as demonstrated by mishandling of rae insns printing for this file during objdump -D     execution. (CVE-2017-9746)

  - The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer     overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as     demonstrated by mishandling of this file during objdump -D execution. NOTE: this may be related to a     compiler bug. (CVE-2017-9747)

  - The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer     overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as     demonstrated by mishandling of this file during objdump -D execution. NOTE: this may be related to a     compiler bug. (CVE-2017-9748)

  - The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of     service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted     binary file, as demonstrated by mishandling of this file during objdump -D execution. (CVE-2017-9749)

  - opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows     remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have     unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during     objdump -D execution. (CVE-2017-9750)

  - opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers     to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other     impact via a crafted binary file, as demonstrated by mishandling of this file during objdump -D     execution. (CVE-2017-9751)

  - bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils     2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or     possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this     file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during objdump -D execution.
    (CVE-2017-9752)

  - The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd),     as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote     attackers to cause a denial of service (buffer overflow and application crash) or possibly have     unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during     objdump -D execution. (CVE-2017-9753)

  - The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to     cause a denial of service (buffer overflow and application crash) or possibly have unspecified other     impact via a crafted binary file, as demonstrated by mishandling of this file during objdump -D     execution. (CVE-2017-9754)

  - opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which     allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly     have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file     during objdump -D execution. (CVE-2017-9755)

  - The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read     and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.
    (CVE-2017-9954)

  - The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer     over-read and application crash) via a crafted file in which a certain size field is larger than a     corresponding data field, as demonstrated by mishandling within the objdump program. (CVE-2017-9955)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
195456	RHEL 6 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
105627	GLSA-201801-01 : Binutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/8/2018	4/5/2019	high
195378	RHEL 7 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
195398	RHEL 4 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
195414	RHEL 5 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical

Detections

Analytics

Plugins Search

critical

high

critical

high

critical