CVE-2014-8485 in binutils

Resumen

por MITRE

The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 2014-10-26
• Divulgación: 2014-12-09
• Moderación: aceptado
• Artículo: VDB-68073
• CPE: listo
• CWE: CWE-94 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.07486
• KEV: no
• Actividades: muy bajo
• Sector: Hostingprovider, Telecommunication

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-8485
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8485
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-8485/