CVE-2014-8484
Published: 9 December 2014
The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
Notes
Author | Note |
---|---|
sbeattie | last chunk of commit is to revert immediately prior commit, dropping that chunk from our patch |
Priority
Status
Package | Release | Status |
---|---|---|
binutils Launchpad, Ubuntu, Debian |
upstream |
Released
(2.25)
|
lucid |
Released
(2.20.1-3ubuntu7.2)
|
|
precise |
Released
(2.22-6ubuntu1.2)
|
|
trusty |
Released
(2.24-5ubuntu3.1)
|
|
utopic |
Not vulnerable
(2.24.90.20141014-0ubuntu3)
|
|
Patches: upstream: https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=bd25671c6f202c4a5108883caa2adb24ff6f361f |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8484
- http://openwall.com/lists/oss-security/2014/10/23/4
- http://openwall.com/lists/oss-security/2014/10/23/5
- http://www.openwall.com/lists/oss-security/2014/10/26
- http://openwall.com/lists/oss-security/2014/10/26/2
- https://ubuntu.com/security/notices/USN-2496-1
- NVD
- Launchpad
- Debian