An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: heap-based buffer overflow in finish_stab in stabs.c (CVE-2018-12699)

  - The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to     cause a denial of service (out-of-bounds read) via a small S-record. (CVE-2014-8484)

  - The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers     to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers     in an ELF file. (CVE-2014-8485)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: heap-based buffer overflow in finish_stab in stabs.c (CVE-2018-12699)

  - binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump,     bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow     trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to     be exploitable via Local. This vulnerability appears to have been fixed in after commit     3a551c7a1b80fca579461774860574eabfd7f18f. (CVE-2018-1000876)

  - The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab     entry with a SECTION type that has a 0 value, which allows remote attackers to cause a denial of     service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
    (CVE-2018-10535)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: heap-based buffer overflow in finish_stab in stabs.c (CVE-2018-12699)

  - The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka     libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of     bounds heap read via a crafted vms file. (CVE-2017-12449)

  - The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote     attackers to cause an out of bounds stack read via a crafted COFF image file. (CVE-2017-12451)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
    (CVE-2023-25584)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
    (CVE-2023-25584)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 22.10 / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6101-1 advisory.

  - Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64. (CVE-2023-1579)

  - A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may     lead to loss of availability. (CVE-2023-1972)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
200048	RHEL 6 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
200030	RHEL 8 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199956	RHEL 7 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
188557	EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-2832)	Nessus	Huawei Local Security Checks	high
188499	EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-3065)	Nessus	Huawei Local Security Checks	high
188490	EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-2827)	Nessus	Huawei Local Security Checks	high
188479	EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2023-2950)	Nessus	Huawei Local Security Checks	high
188312	EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2023-2976)	Nessus	Huawei Local Security Checks	high
188295	EulerOS Virtualization 2.10.0 : binutils (EulerOS-SA-2023-2931)	Nessus	Huawei Local Security Checks	high
188284	EulerOS Virtualization 2.10.1 : binutils (EulerOS-SA-2023-2912)	Nessus	Huawei Local Security Checks	high
188174	EulerOS 2.0 SP10 : binutils (EulerOS-SA-2023-2803)	Nessus	Huawei Local Security Checks	high
188116	EulerOS 2.0 SP10 : binutils (EulerOS-SA-2023-2779)	Nessus	Huawei Local Security Checks	high
188109	EulerOS Virtualization 2.11.1 : binutils (EulerOS-SA-2023-3048)	Nessus	Huawei Local Security Checks	high
179554	EulerOS 2.0 SP9 : binutils (EulerOS-SA-2023-2603)	Nessus	Huawei Local Security Checks	high
179517	EulerOS 2.0 SP9 : binutils (EulerOS-SA-2023-2573)	Nessus	Huawei Local Security Checks	high
176325	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : GNU binutils vulnerabilities (USN-6101-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2023-25584

high

Tenable Plugins

critical

critical

critical

high

high

high

high

high

high

high

high

high

high

high

high

high