Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*

part: a version: 2.29.1 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductBinutils (bdfd61c2-da72-5ce9-819e-45ee45378259)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/binutils purl2cpe 2026-06-01 10:11:54.199023
pkg:deb/ubuntu/binutils purl2cpe 2026-06-01 10:11:54.199025
pkg:github/bminor/binutils-gdb purl2cpe 2026-06-01 10:11:54.199026
pkg:redox-os/redox-os/binutils-gdb purl2cpe 2026-06-01 10:11:54.199027
pkg:rpm/fedora/binutils purl2cpe 2026-06-01 10:11:54.199029
pkg:rpm/opensuse/binutils purl2cpe 2026-06-01 10:11:54.199030
pkg:sourceware/binutils-gdb purl2cpe 2026-06-01 10:11:54.199031

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6323 vulnerable 2026-06-08 05:11:53.596544 Details available
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Published: 2018-01-26T08:00:00.000Z
Updated: 2024-08-05T06:01:48.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17126 vulnerable 2026-06-08 05:09:07.929312 Details available
The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.
Published: 2017-12-04T08:00:00.000Z
Updated: 2024-08-05T20:43:59.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17125 vulnerable 2026-06-08 05:09:07.929014 Details available
nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file.
Published: 2017-12-04T08:00:00.000Z
Updated: 2024-08-05T20:43:59.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17124 vulnerable 2026-06-08 05:09:07.928730 Details available
The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.
Published: 2017-12-04T08:00:00.000Z
Updated: 2024-08-05T20:43:59.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17123 vulnerable 2026-06-08 05:09:07.928438 Details available
The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.
Published: 2017-12-04T08:00:00.000Z
Updated: 2024-08-05T20:43:59.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17122 vulnerable 2026-06-08 05:09:07.928132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17121 vulnerable 2026-06-08 05:09:07.927819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17080 vulnerable 2026-06-08 05:09:07.854600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16832 vulnerable 2026-06-08 05:09:01.104458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16831 vulnerable 2026-06-08 05:09:01.104150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16830 vulnerable 2026-06-08 05:09:01.103856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16829 vulnerable 2026-06-08 05:09:01.103548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16828 vulnerable 2026-06-08 05:09:01.103243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16827 vulnerable 2026-06-08 05:09:01.102921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16826 vulnerable 2026-06-08 05:09:01.102523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.