CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks. |
| 22/08/2023 |
| CVE-2022-47008 | MEDIUM5.5 | An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks. | 22/08/2023 |
| CVE-2022-47007 | MEDIUM5.5 | An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks. | 22/08/2023 |
| CVE-2022-45703 | HIGH7.8 | Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c. | 22/08/2023 |
| CVE-2022-44840 | HIGH7.8 | Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c. | 22/08/2023 |
| CVE-2022-35206 | MEDIUM5.5 | Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c. | 22/08/2023 |
| CVE-2022-35205 | MEDIUM5.5 | An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service. | 22/08/2023 |
| CVE-2021-46174 | HIGH7.5 | Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. | 22/08/2023 |
| CVE-2020-35357 | MEDIUM6.5 | A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code executio | 22/08/2023 |
| CVE-2020-35342 | HIGH7.5 | GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak. | 22/08/2023 |
| CVE-2020-21490 | MEDIUM5.5 | An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled. | 22/08/2023 |
| CVE-2020-19726 | HIGH8.8 | An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service. | 22/08/2023 |
| CVE-2020-19724 | MEDIUM5.5 | A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command. | 22/08/2023 |
| CVE-2023-40305 | MEDIUM5.5 | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. | 14/08/2023 |
| CVE-2023-40303 | HIGH7.8 | GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activ | 14/08/2023 |
| CVE-2023-39130 | MEDIUM5.5 | GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. | 25/07/2023 |
| CVE-2023-39129 | MEDIUM5.5 | GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c. | 25/07/2023 |