CVE-2014-8501
Fixed in a distro release EPSS 5%
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.
Products: gnu binutils, canonical ubuntu_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | binutils | 2.24.90.20141104-1 |
| Debian 12 | binutils-mingw-w64 | 5.2 |
| Debian 12 | gdb | no fix |
| Debian 13 | binutils | 2.24.90.20141104-1 |
| Debian 13 | binutils-mingw-w64 | 5.2 |
| Debian 13 | gdb | no fix |
| Debian 14 | binutils | 2.24.90.20141104-1 |
| Debian 14 | binutils-mingw-w64 | 5.2 |
| Debian 14 | gdb | no fix |
| Debian 6.0 | binutils | 2.20.1-16+deb6u1 |
| Debian 7 | binutils | 2.22-8+deb7u2 |
| Debian 7 | binutils-mingw-w64 | 2+deb7u1 |
| Red Hat Enterprise Linux 7 | binutils | 0:2.23.52.0.1-55.el7 |
| Red Hat Enterprise Linux 7 | binutils-debuginfo | 0:2.23.52.0.1-55.el7 |
| Red Hat Enterprise Linux 7 | binutils-devel | 0:2.23.52.0.1-55.el7 |
| Ubuntu 14.04 LTS | binutils | 2.24-5ubuntu3.1 |
| Ubuntu 14.04 LTS | gdb | 7.7.1-0ubuntu5~14.04.3 |
| Ubuntu 16.04 LTS | gdb | 7.11.1-0ubuntu1~16.5 |