[Bug 1162607] New: CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file - mingw - Fedora Mailing-Lists

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

[Bug 1162607] New: CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

[Bug 1162621] New: CVE-2014-8504...

[Bug 1162594] New: CVE-2014-8502...

Red Hat Bugzilla

Tuesday, 11 November 2014 Tue, 11 Nov '14

5:30 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug ID: 1162607 Summary: CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: bgollahe(a)redhat.com, dan(a)danny.cz, dhowells(a)redhat.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, jakub(a)redhat.com, kalevlember(a)gmail.com, kanderso(a)redhat.com, ktietz(a)redhat.com, law(a)redhat.com, lkocman(a)redhat.com, lkundrak(a)v3.sk, mfranc(a)redhat.com, mhlavink(a)redhat.com, nickc(a)redhat.com, ohudlick(a)redhat.com, pfrankli(a)redhat.com, rjones(a)redhat.com, rob(a)robspanton.com, seceng-idm-qe-list(a)redhat.com, swhiteho(a)redhat.com, thibault.north(a)gmail.com, tmlcoch(a)redhat.com, trond.danielsen(a)gmail.com Stack overflow was reported [1] in objdump when parsing a crafted ihex file [2]. Upstream patch is at [3]. [1]: https://sourceware.org/bugzilla/show_bug.cgi?id=17512#c33 [2]: https://sourceware.org/bugzilla/attachment.cgi?id=7869 [3]: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=0102ea8cec5fc5... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=fWj88qzSHL&a=cc_unsubscribe

Reply

Show replies by date

Red Hat Bugzilla

Tuesday, 11 November Tue, 11 Nov

5:30 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1156276 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mAXavwwbXg&a=cc_unsubscribe

Reply

Red Hat Bugzilla

5:33 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1162608 Depends On| |1162609 Depends On| |1162610 Depends On| |1162611 Depends On| |1162612 Depends On| |1162613 Depends On| |1162617 Depends On| |1162618 Depends On| |1162619 --- Comment #1 from Vasyl Kaigorodov <vkaigoro(a)redhat.com> --- Created avr-binutils tracking bugs for this issue: Affects: epel-all [bug 1162617] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1162608 [Bug 1162608] CVE-2014-8503 arm-none-eabi-binutils-cs: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162609 [Bug 1162609] CVE-2014-8503 avr-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162610 [Bug 1162610] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162611 [Bug 1162611] CVE-2014-8503 cross-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162612 [Bug 1162612] CVE-2014-8503 mingw-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162613 [Bug 1162613] CVE-2014-8503 msp430-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162617 [Bug 1162617] CVE-2014-8503 avr-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162618 [Bug 1162618] CVE-2014-8503 cross-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162619 [Bug 1162619] CVE-2014-8503 mingw-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [epel-all] -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=4BXwSa1iQR&a=cc_unsubscribe

Reply

Red Hat Bugzilla

5:33 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 --- Comment #2 from Vasyl Kaigorodov <vkaigoro(a)redhat.com> --- Created cross-binutils tracking bugs for this issue: Affects: epel-all [bug 1162618] -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=6rohCSCQyk&a=cc_unsubscribe

Reply

Red Hat Bugzilla

5:33 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 --- Comment #3 from Vasyl Kaigorodov <vkaigoro(a)redhat.com> --- Created mingw-binutils tracking bugs for this issue: Affects: epel-all [bug 1162619] -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=0H7JuoVfVQ&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Wednesday, 26 November Wed, 26 Nov

8:58 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20141030, |impact=low,public=20141030, |reported=20141111,source=os |reported=20141111,source=os |s-sec,cvss2=1.2/AV:L/AC:H/A |s-sec,cvss2=1.2/AV:L/AC:H/A |u:N/C:P/I:N/A:N,cwe=CWE-121 |u:N/C:P/I:N/A:N,cwe=CWE-121 |,dts-2.1/devtoolset-2-binut |,dts-2.1/devtoolset-2-binut |ils=new,dts-3.0/devtoolset- |ils=affected,dts-3.0/devtoo |3-binutils=new,fedora-all/a |lset-3-binutils=affected,fe |rm-none-eabi-binutils-cs=af |dora-all/arm-none-eabi-binu |fected,fedora-all/avr-binut |tils-cs=affected,fedora-all |ils=affected,fedora-all/bin |/avr-binutils=affected,fedo |utils=affected,fedora-all/c |ra-all/binutils=affected,fe |ross-binutils=affected,fedo |dora-all/cross-binutils=aff |ra-all/mingw-binutils=affec |ected,fedora-all/mingw-binu |ted,fedora-all/msp430-binut |tils=affected,fedora-all/ms |ils=affected,rhel-4/binutil |p430-binutils=affected,rhel |s=new,rhel-5/binutils=new,r |-5/binutils=wontfix,rhel-5/ |hel-5/binutils220=new,rhel- |binutils220=wontfix,rhel-6/ |6/binutils=new,rhel-6/mingw |binutils=affected,rhel-6/mi |32-binutils=new,rhel-7/binu |ngw32-binutils=defer,rhel-7 |tils=new,epel-all/avr-binut |/binutils=affected,epel-all |ils=affected,epel-all/cross |/avr-binutils=affected,epel |-binutils=affected,epel-all |-all/cross-binutils=affecte |/mingw-binutils=affected |d,epel-all/mingw-binutils=a | |ffected --- Comment #4 from Vasyl Kaigorodov <vkaigoro(a)redhat.com> --- Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sS7QG0E505&a=cc_unsubscribe

Reply

Red Hat Bugzilla

9:13 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |binutils 2.25 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=8VQs0TSy46&a=cc_unsubscribe

Reply

Red Hat Bugzilla

9:53 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1168281 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=jLCIVuHYES&a=cc_unsubscribe

Reply

Red Hat Bugzilla

9:54 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1168302 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=fA0R9Hx2YV&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Thursday, 27 November Thu, 27 Nov

3:14 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Tomas Hoger <thoger(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20141030, |impact=low,public=20141030, |reported=20141111,source=os |reported=20141111,source=os |s-sec,cvss2=1.2/AV:L/AC:H/A |s-sec,cvss2=1.2/AV:L/AC:H/A |u:N/C:P/I:N/A:N,cwe=CWE-121 |u:N/C:P/I:N/A:N,cwe=CWE-121 |,dts-2.1/devtoolset-2-binut |,dts-2.1/devtoolset-2-binut |ils=affected,dts-3.0/devtoo |ils=affected,dts-3.0/devtoo |lset-3-binutils=affected,fe |lset-3-binutils=affected,fe |dora-all/arm-none-eabi-binu |dora-all/arm-none-eabi-binu |tils-cs=affected,fedora-all |tils-cs=affected,fedora-all |/avr-binutils=affected,fedo |/avr-binutils=affected,fedo |ra-all/binutils=affected,fe |ra-all/binutils=affected,fe |dora-all/cross-binutils=aff |dora-all/cross-binutils=aff |ected,fedora-all/mingw-binu |ected,fedora-all/mingw-binu |tils=affected,fedora-all/ms |tils=affected,fedora-all/ms |p430-binutils=affected,rhel |p430-binutils=affected,rhel |-5/binutils=wontfix,rhel-5/ |-5/binutils=wontfix,rhel-5/ |binutils220=wontfix,rhel-6/ |binutils220=wontfix,rhel-6/ |binutils=affected,rhel-6/mi |binutils=affected,rhel-6/mi |ngw32-binutils=defer,rhel-7 |ngw32-binutils=wontfix,rhel |/binutils=affected,epel-all |-7/binutils=affected,epel-a |/avr-binutils=affected,epel |ll/avr-binutils=affected,ep |-all/cross-binutils=affecte |el-all/cross-binutils=affec |d,epel-all/mingw-binutils=a |ted,epel-all/mingw-binutils |ffected |=affected -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ecwMrNQzoN&a=cc_unsubscribe

Reply

Red Hat Bugzilla

8:38 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20141030, |impact=low,public=20141030, |reported=20141111,source=os |reported=20141111,source=os |s-sec,cvss2=1.2/AV:L/AC:H/A |s-sec,cvss2=1.2/AV:L/AC:H/A |u:N/C:P/I:N/A:N,cwe=CWE-121 |u:N/C:P/I:N/A:N,cwe=CWE-121 |,dts-2.1/devtoolset-2-binut |,dts-2.1/devtoolset-2-binut |ils=affected,dts-3.0/devtoo |ils=affected,dts-3.0/devtoo |lset-3-binutils=affected,fe |lset-3-binutils=affected,fe |dora-all/arm-none-eabi-binu |dora-all/arm-none-eabi-binu |tils-cs=affected,fedora-all |tils-cs=affected,fedora-all |/avr-binutils=affected,fedo |/avr-binutils=affected,fedo |ra-all/binutils=affected,fe |ra-all/binutils=affected,fe |dora-all/cross-binutils=aff |dora-all/cross-binutils=aff |ected,fedora-all/mingw-binu |ected,fedora-all/mingw-binu |tils=affected,fedora-all/ms |tils=affected,fedora-all/ms |p430-binutils=affected,rhel |p430-binutils=affected,rhel |-5/binutils=wontfix,rhel-5/ |-5/binutils=wontfix,rhel-5/ |binutils220=wontfix,rhel-6/ |binutils220=wontfix,rhel-6/ |binutils=affected,rhel-6/mi |binutils=affected,rhel-6/mi |ngw32-binutils=wontfix,rhel |ngw32-binutils=wontfix,rhel |-7/binutils=affected,epel-a |-7/binutils=defer,epel-all/ |ll/avr-binutils=affected,ep |avr-binutils=affected,epel- |el-all/cross-binutils=affec |all/cross-binutils=affected |ted,epel-all/mingw-binutils |,epel-all/mingw-binutils=af |=affected |fected -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ZxCIwozM80&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Wednesday, 10 December Wed, 10 Dec

9:28 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1172710 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ephpKMsWCZ&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Friday, 12 December Fri, 12 Dec

4:34 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug 1162607 depends on bug 1162608, which changed state. Bug 1162608 Summary: CVE-2014-8503 arm-none-eabi-binutils-cs: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162608 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=anXMgrI3Ll&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Thursday, 1 January Thu, 1 Jan

11:06 p.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug 1162607 depends on bug 1162612, which changed state. Bug 1162612 Summary: CVE-2014-8503 mingw-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162612 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=wPlcvG5NG6&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Thursday, 8 January Thu, 8 Jan

9 p.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug 1162607 depends on bug 1162619, which changed state. Bug 1162619 Summary: CVE-2014-8503 mingw-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162619 What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=MBcXYL0vXr&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Tuesday, 24 March Tue, 24 Mar

1:53 p.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug 1162607 depends on bug 1162611, which changed state. Bug 1162611 Summary: CVE-2014-8503 cross-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162611 What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution|--- |CURRENTRELEASE -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=g6cs3UR25w&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Friday, 10 April Fri, 10 Apr

2:30 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug 1162607 depends on bug 1162609, which changed state. Bug 1162609 Summary: CVE-2014-8503 avr-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162609 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=zCSnvHsirE&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Wednesday, 13 May Wed, 13 May

5:21 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20141030, |impact=low,public=20141030, |reported=20141111,source=os |reported=20141111,source=os |s-sec,cvss2=1.2/AV:L/AC:H/A |s-security,cvss2=1.2/AV:L/A |u:N/C:P/I:N/A:N,cwe=CWE-121 |C:H/Au:N/C:P/I:N/A:N,cwe=CW |,dts-2.1/devtoolset-2-binut |E-121,dts-2.1/devtoolset-2- |ils=affected,dts-3.0/devtoo |binutils=affected,dts-3.0/d |lset-3-binutils=affected,fe |evtoolset-3-binutils=affect |dora-all/arm-none-eabi-binu |ed,fedora-all/arm-none-eabi |tils-cs=affected,fedora-all |-binutils-cs=affected,fedor |/avr-binutils=affected,fedo |a-all/avr-binutils=affected |ra-all/binutils=affected,fe |,fedora-all/binutils=affect |dora-all/cross-binutils=aff |ed,fedora-all/cross-binutil |ected,fedora-all/mingw-binu |s=affected,fedora-all/mingw |tils=affected,fedora-all/ms |-binutils=affected,fedora-a |p430-binutils=affected,rhel |ll/msp430-binutils=affected |-5/binutils=wontfix,rhel-5/ |,rhel-5/binutils=wontfix,rh |binutils220=wontfix,rhel-6/ |el-5/binutils220=wontfix,rh |binutils=affected,rhel-6/mi |el-6/binutils=affected,rhel |ngw32-binutils=wontfix,rhel |-6/mingw32-binutils=wontfix |-7/binutils=defer,epel-all/ |,rhel-7/binutils=defer,epel |avr-binutils=affected,epel- |-all/avr-binutils=affected, |all/cross-binutils=affected |epel-all/cross-binutils=aff |,epel-all/mingw-binutils=af |ected,epel-all/mingw-binuti |fected |ls=affected -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=eElJEMmS3G&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Monday, 18 May Mon, 18 May

6:14 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Vasyl Kaigorodov <vkaigoro(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20141030, |impact=low,public=20141030, |reported=20141111,source=os |reported=20141111,source=os |s-security,cvss2=1.2/AV:L/A |s-security,cvss2=2.6/AV:L/A |C:H/Au:N/C:P/I:N/A:N,cwe=CW |C:H/Au:N/C:P/I:N/A:P,cwe=CW |E-121,dts-2.1/devtoolset-2- |E-121,dts-2.1/devtoolset-2- |binutils=affected,dts-3.0/d |binutils=affected,dts-3.0/d |evtoolset-3-binutils=affect |evtoolset-3-binutils=affect |ed,fedora-all/arm-none-eabi |ed,fedora-all/arm-none-eabi |-binutils-cs=affected,fedor |-binutils-cs=affected,fedor |a-all/avr-binutils=affected |a-all/avr-binutils=affected |,fedora-all/binutils=affect |,fedora-all/binutils=affect |ed,fedora-all/cross-binutil |ed,fedora-all/cross-binutil |s=affected,fedora-all/mingw |s=affected,fedora-all/mingw |-binutils=affected,fedora-a |-binutils=affected,fedora-a |ll/msp430-binutils=affected |ll/msp430-binutils=affected |,rhel-5/binutils=wontfix,rh |,rhel-5/binutils=wontfix,rh |el-5/binutils220=wontfix,rh |el-5/binutils220=wontfix,rh |el-6/binutils=affected,rhel |el-6/binutils=affected,rhel |-6/mingw32-binutils=wontfix |-6/mingw32-binutils=wontfix |,rhel-7/binutils=defer,epel |,rhel-7/binutils=defer,epel |-all/avr-binutils=affected, |-all/avr-binutils=affected, |epel-all/cross-binutils=aff |epel-all/cross-binutils=aff |ected,epel-all/mingw-binuti |ected,epel-all/mingw-binuti |ls=affected |ls=affected --- Doc Text *updated* --- A stack-based buffer overflow flaw was found in the way objdump processed IHEX files. If a user were tricked into running objdump on a specially crafted IHEX file, it could cause objdump to crash or potentially execute arbitrary code with the privileges of the user running objdump. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=o429LBW9OI&a=cc_unsubscribe

Reply

Red Hat Bugzilla

6:31 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 --- Doc Text *updated* by Vasyl Kaigorodov <vkaigoro(a)redhat.com> --- A stack-based buffer overflow flaw was found in the way objdump processed IHEX files. If a user were tricked into running objdump on a specially crafted IHEX file, it could cause objdump to crash or potentially execute arbitrary code with the privileges of the user running objdump. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=wHVpnk0ACd&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Tuesday, 26 May Tue, 26 May

4:01 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 --- Doc Text *updated* by Martin Prpic <mprpic(a)redhat.com> --- A stack-based buffer overflow flaw was found in the way objdump processed IHEX files. A specially crafted IHEX file could cause objdump to crash or, potentially, execute arbitrary code with the privileges of the user running objdump. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=xF7c86OWUO&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Friday, 26 June Fri, 26 Jun

11:03 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 --- Comment #8 from Nick Clifton <nickc(a)redhat.com> --- Created attachment 1043595 --> https://bugzilla.redhat.com/attachment.cgi?id=1043595&action=edit Corrupt ihex file -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=cc0Segwauc&a=cc_unsubscribe

Reply

Red Hat Bugzilla

11:04 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 --- Comment #9 from Nick Clifton <nickc(a)redhat.com> --- Created attachment 1043596 --> https://bugzilla.redhat.com/attachment.cgi?id=1043596&action=edit Fix, imported from PR 17512 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=EPQh7KE1LQ&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Monday, 29 June Mon, 29 Jun

8:26 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Nick Clifton <nickc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |MODIFIED Fixed In Version|binutils 2.25 |(binutils-2.23.52.0.1-47.el | |7 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=fgS7dOxYBY&a=cc_unsubscribe

Reply

Red Hat Bugzilla

6:15 p.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug 1162607 depends on bug 1162610, which changed state. Bug 1162610 Summary: CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162610 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=jWZitrc43s&a=cc_unsubscribe

Reply

Red Hat Bugzilla

6:15 p.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Bug 1162607 depends on bug 1162613, which changed state. Bug 1162613 Summary: CVE-2014-8503 msp430-binutils: binutils: stack overflow in objdump when parsing specially crafted ihex file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1162613 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=OJn2WGLESN&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Thursday, 2 July Thu, 2 Jul

5:54 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Tomas Hoger <thoger(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |NEW Fixed In Version|(binutils-2.23.52.0.1-47.el |binutils 2.25 |7 | -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=epCICn44iE&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Monday, 21 September Mon, 21 Sep

7:22 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Miloš Prchlík <mprchlik(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mprchlik(a)redhat.com -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=IaeTrlD4Bc&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Wednesday, 30 September Wed, 30 Sep

1:15 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1210268 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=cQKckA6XCJ&a=cc_unsubscribe

Reply

Red Hat Bugzilla

1:22 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20141030, |impact=low,public=20141030, |reported=20141111,source=os |reported=20141111,source=os |s-security,cvss2=2.6/AV:L/A |s-security,cvss2=2.6/AV:L/A |C:H/Au:N/C:P/I:N/A:P,cwe=CW |C:H/Au:N/C:P/I:N/A:P,cwe=CW |E-121,dts-2.1/devtoolset-2- |E-121,dts-2.1/devtoolset-2- |binutils=affected,dts-3.0/d |binutils=affected,dts-3.0/d |evtoolset-3-binutils=affect |evtoolset-3-binutils=affect |ed,fedora-all/arm-none-eabi |ed,fedora-all/arm-none-eabi |-binutils-cs=affected,fedor |-binutils-cs=affected,fedor |a-all/avr-binutils=affected |a-all/avr-binutils=affected |,fedora-all/binutils=affect |,fedora-all/binutils=affect |ed,fedora-all/cross-binutil |ed,fedora-all/cross-binutil |s=affected,fedora-all/mingw |s=affected,fedora-all/mingw |-binutils=affected,fedora-a |-binutils=affected,fedora-a |ll/msp430-binutils=affected |ll/msp430-binutils=affected |,rhel-5/binutils=wontfix,rh |,rhel-5/binutils=wontfix,rh |el-5/binutils220=wontfix,rh |el-5/binutils220=wontfix,rh |el-6/binutils=affected,rhel |el-6/binutils=affected,rhel |-6/mingw32-binutils=wontfix |-6/mingw32-binutils=wontfix |,rhel-7/binutils=defer,epel |,rhel-7/binutils=affected,e |-all/avr-binutils=affected, |pel-all/avr-binutils=affect |epel-all/cross-binutils=aff |ed,epel-all/cross-binutils= |ected,epel-all/mingw-binuti |affected,epel-all/mingw-bin |ls=affected |utils=affected -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=U5Gw7wUDM8&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Thursday, 1 October Thu, 1 Oct

8:51 a.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20141030, |impact=low,public=20141030, |reported=20141111,source=os |reported=20141111,source=os |s-security,cvss2=2.6/AV:L/A |s-security,cvss2=2.6/AV:L/A |C:H/Au:N/C:P/I:N/A:P,cwe=CW |C:H/Au:N/C:P/I:N/A:P,cwe=CW |E-121,dts-2.1/devtoolset-2- |E-121,dts-2.1/devtoolset-2- |binutils=affected,dts-3.0/d |binutils=wontfix,dts-3.0/de |evtoolset-3-binutils=affect |vtoolset-3-binutils=affecte |ed,fedora-all/arm-none-eabi |d,fedora-all/arm-none-eabi- |-binutils-cs=affected,fedor |binutils-cs=affected,fedora |a-all/avr-binutils=affected |-all/avr-binutils=affected, |,fedora-all/binutils=affect |fedora-all/binutils=affecte |ed,fedora-all/cross-binutil |d,fedora-all/cross-binutils |s=affected,fedora-all/mingw |=affected,fedora-all/mingw- |-binutils=affected,fedora-a |binutils=affected,fedora-al |ll/msp430-binutils=affected |l/msp430-binutils=affected, |,rhel-5/binutils=wontfix,rh |rhel-5/binutils=wontfix,rhe |el-5/binutils220=wontfix,rh |l-5/binutils220=wontfix,rhe |el-6/binutils=affected,rhel |l-6/binutils=affected,rhel- |-6/mingw32-binutils=wontfix |6/mingw32-binutils=wontfix, |,rhel-7/binutils=affected,e |rhel-7/binutils=affected,ep |pel-all/avr-binutils=affect |el-all/avr-binutils=affecte |ed,epel-all/cross-binutils= |d,epel-all/cross-binutils=a |affected,epel-all/mingw-bin |ffected,epel-all/mingw-binu |utils=affected |tils=affected -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=dGKllLFLQH&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Wednesday, 18 November Wed, 18 Nov

9:33 p.m.

New subject: [Bug 1162607] CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file

https://bugzilla.redhat.com/show_bug.cgi?id=1162607 --- Comment #10 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2015:2079 https://rhn.redhat.com/errata/RHSA-2015-2079.html -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ezfhr6zGwS&a=cc_unsubscribe

Reply

3080

days inactive

3453

days old

mingw@lists.fedoraproject.org

Manage subscription

31 comments

1 participants

tags (0)

participants (1)

Red Hat Bugzilla