CVE-2014-8485 in binutils

Résumé

par MITRE

The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 26/10/2014
• Divulgation: 09/12/2014
• Modérer: accepté
• Entrée: VDB-68073
• CPE: prêt
• CWE: CWE-94 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.07486
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider, Telecommunication

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-8485
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8485
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-8485/