CVE-2014-8484

GNU binutils < 2.24 - Denial of Service via Small S-record in srec_scan

Title source: llm
STIX 2.1

Description

The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.

References (15)

Core 15
Core References
Permissions Required, Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62241
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2015:029
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2496-1
Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/10/23/5
Issue Tracking x_refsource_confirm
https://sourceware.org/bugzilla/show_bug.cgi?id=17509
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/70714
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/10/26/2
Broken Link x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1156272
Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html
Permissions Required, Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62746
Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201612-24

Scores

EPSS 0.0202
EPSS Percentile 84.0%

Details

CWE
CWE-119
Status published
Products (8)
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 14.10
fedoraproject/fedora 19
fedoraproject/fedora 20
fedoraproject/fedora 21
gnu/binutils < 2.24
Published Dec 09, 2014
Tracked Since Feb 18, 2026