Wenjusun

A critical issue affects the function `msf stream directory free` in the library `/librz/bin/pdb/pdb.c`. The manipulation of the argument `-P` leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

A critical vulnerability was found in rizinorg rizin, affecting the `rz utf8 encode` function in the library `/librz/util/utf8.c`. The manipulation leads to a heap-based buffer overflow. An attack must be approached locally. The exploit has been disclosed to the public and may be used.

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192 Description: A problem has been found in GNU elfutils that affects the `gelf getsymshndx` function of the file strip.c in the eu-strip component. This issue leads to denial of service and must be approached locally. The exploit has been disclosed and may be used. Recommendations: To fix this issue, apply a patch with the identifier fbf1df9ca286de3323ae541973b08449f8d03aba to GNU elfutils version 0.192. As a temporary workaround, consider disabling the `gelf getsymshndx` function until a patch is available.

Name of the Vulnerable Software and Affected Versions: radare2 versions 5.9.9 through 5.9.9 33286 Description: A vulnerability was found in radare2, affecting an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Recommendations: To address this issue, upgrade to version 6.0.0. The patch is identified as c6c772d2eab692ce7ada5a4227afd50c355ad545. It is recommended to upgrade the affected component.

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192 Description: A vulnerability was found in GNU elfutils, affecting the function `elf strptr` in the library `/libelf/elf strptr.c` of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high, and the exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Recommendations: To fix this issue, it is recommended to apply a patch, specifically the patch with the name b16f441cca0a4841050e3215a9f120a6d8aea918. As a temporary workaround, consider disabling the `elf strptr` function in the `/libelf/elf strptr.c` library until a patch is applied. Restrict access to the eu-strip component to minimize the risk of exploitation.

A problematic issue has been found in vim, affecting unknown code in the src/main.c file. The manipulation of the `--log` argument leads to memory corruption, allowing an attack to be launched on the local host.

A problematic issue has been found in GNU Binutils, affecting the ` bfd elf write section eh frame` function of the `ld` component. This issue leads to memory corruption and can be initiated remotely, although the complexity of an attack is rather high and the exploitability is difficult.

A critical vulnerability was found in GNU Binutils, affecting the function `bfd elf reloc symbol deleted p` of the file `bfd/elflink.c` of the component `ld`. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high, and the exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

A critical issue has been found in GNU Binutils, affecting the function `bfd putl64` of the file `bfd/libbfd.c` of the component `ld`. This issue leads to memory corruption and can be exploited remotely, although the complexity of an attack is rather high and the exploitation is known to be difficult.

A critical issue affects the function ` bfd elf gc mark rsec` of the file `elflink.c` of the component `ld`. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult.

A vulnerability was found in GNU Binutils, affecting the function `bfd putl64` of the file `libbfd.c` of the component `ld`. The manipulation leads to memory corruption. The attack can be launched remotely, but the complexity of an attack is rather high and the exploitation appears to be difficult.

A critical vulnerability was found in GNU Binutils, affecting the function ` bfd elf gc mark rsec` of the file `bfd/elflink.c` of the component `ld`. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high, and the exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

A problematic issue was found in GNU Binutils, affecting the `disassemble bytes` function of the file `binutils/objdump.c`. The manipulation of the `buf` argument leads to a stack-based buffer overflow. It is possible to initiate the attack remotely, with a rather high complexity and difficult exploitability.

A problematic vulnerability was found in GNU Binutils, affecting the `bfd set format` function of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely, with a rather high complexity, making exploitation difficult.

A memory leak issue was found in the `link order scan` function of the ld component, specifically in the file ld/ldelfgen.c. This issue can be exploited remotely, but the complexity of an attack is rather high, and the exploitation is known to be difficult. The attack leads to a memory leak.

A problem has been found in the function ` sanitizer::internal strlen` of the file binutils/nm.c of the component nm. The manipulation of the argument `const` leads to buffer overflow. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.