This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: NULL pointer dereference in bfd_elf_final_link function (CVE-2017-7614)

  - The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to     cause a denial of service (out-of-bounds read) via a small S-record. (CVE-2014-8484)

  - The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers     to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers     in an ELF file. (CVE-2014-8485)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

An update of the crash package has been released.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: NULL pointer dereference in bfd_elf_final_link function (CVE-2017-7614)

  - The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to     cause a denial of service (out-of-bounds read) via a small S-record. (CVE-2014-8484)

  - The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers     to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers     in an ELF file. (CVE-2014-8485)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201801-01 (Binutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Binutils. Please review       the referenced CVE identifiers for details.
  Impact :

    A remote attacker, by enticing a user to compile/execute a specially       crafted ELF, tekhex, PE, or binary file, could possibly cause a Denial of       Service condition.
  Workaround :

    There are no known workarounds at this time.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary     (CVE-2017-9756)

  - The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of     service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted     binary file. (CVE-2017-12799)

  - The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a     denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a     crafted binary file, as demonstrated by mishandling of this file during objdump -D execution.
    (CVE-2017-9742)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: NULL pointer dereference in bfd_elf_final_link function (CVE-2017-7614)

  - The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka     libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of     bounds heap read via a crafted vms file. (CVE-2017-12449)

  - The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote     attackers to cause an out of bounds stack read via a crafted COFF image file. (CVE-2017-12451)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
195456	RHEL 6 : binutils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	critical
200048	RHEL 6 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/25/2024	critical
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	critical
199993	RHEL 5 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/25/2024	critical
105627	GLSA-201801-01 : Binutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/8/2018	4/5/2019	high
200055	RHEL 4 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/25/2024	high
195378	RHEL 7 : binutils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	critical
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	critical
195398	RHEL 4 : binutils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	high
195414	RHEL 5 : binutils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	critical
199956	RHEL 7 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/25/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

high

high

critical

critical

high

critical

critical