CVE-2014-8501

높음 7.5CVE-2014-8501 · Published 09/12/2014 · updated 17/06/2026

요약

CVE-2014-8501은(는) binutils (gnu)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 5.2%, 전체 취약점의 92.4%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
binutils gnu	`≤ 2.24`	No fix yet

Description

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.

References

lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-January/147346.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-January/147354.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-January/148427.html · Third Party Advisory
secunia.com/advisories/62241
secunia.com/advisories/62746
mandriva.com/security/advisories · Broken Link
openwall.com/lists/oss-security/2014/10/26/3 · Mailing List

binutils의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free