PT-2014-8554

CVE-2014-8485

·

Published

2014-01-15

·

Updated

2017-07-01

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier
Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.
Recommendations For GNU binutils versions 2.24 and earlier, update to a version later than 2.24 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2014-8485
ALT-PU-2014-1061
ALT-PU-2016-1015
CESA-2015_2079
DLA-184-1
DSA-3123-1
DSA-3123-2
ECHO-0FBF-5E6F-BAD1
MGASA-2015-0027
RHSA-2015:2079
RHSA-2015_2079
USN-2496-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com