CVE-2014-8501

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
gnubinutils
𝑥
≤ 2.24
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
binutils
bullseye
2.35.2-2
fixed
bookworm
2.40-2
fixed
sid
2.43.1-5
fixed
trixie
2.43.1-5
fixed
binutils-mingw-w64
bullseye
8.11
fixed
bookworm
10.4
fixed
sid
12
fixed
trixie
12
fixed
gdb
bullseye
unimportant
bookworm
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
binutils
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
Fixed 2.24.90.20141014-0ubuntu3.1
released
trusty
Fixed 2.24-5ubuntu3.1
released
precise
Fixed 2.22-6ubuntu1.2
released
lucid
Fixed 2.20.1-3ubuntu7.2
released
gdb
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
ignored
vivid
ignored
utopic
ignored
trusty
Fixed 7.7.1-0ubuntu5~14.04.3
released
precise
ignored
lucid
ignored
References