CVE-2014-8501

EUVD-2014-8338
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
gnubinutils
𝑥
≤ 2.24
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
binutils
bookworm
2.40-2
fixed
bullseye
2.35.2-2
fixed
sid
2.43.1-5
fixed
trixie
2.43.1-5
fixed
binutils-mingw-w64
bookworm
10.4
fixed
bullseye
8.11
fixed
sid
12
fixed
trixie
12
fixed
gdb
bookworm
unimportant
bullseye
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
binutils
lucid
Fixed 2.20.1-3ubuntu7.2
released
precise
Fixed 2.22-6ubuntu1.2
released
trusty
Fixed 2.24-5ubuntu3.1
released
utopic
Fixed 2.24.90.20141014-0ubuntu3.1
released
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
gdb
lucid
ignored
precise
ignored
trusty
Fixed 7.7.1-0ubuntu5~14.04.3
released
utopic
ignored
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
not-affected
zesty
not-affected
References