Bug 159895 – CAN-2005-1704 Integer overflow in the Binary File Descriptor (BFD) library

Bug 159895 - CAN-2005-1704 Integer overflow in the Binary File Descriptor (BFD) library

Summary:	CAN-2005-1704 Integer overflow in the Binary File Descriptor (BFD) library

Status:	CLOSED ERRATA

Aliases:	None

Product:	Fedora
Classification:	Fedora
Component:	binutils (Show other bugs)
Sub Component:
Version:	3
Hardware:	All Linux

Priority	medium Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Jakub Jelinek
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=low,public=20050525,reported=2...
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2005-06-08 17:22 EDT by Josh Bressers
Modified:	2007-11-30 17:11 EST (History)
CC List:	0 users

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2005-06-29 16:54:55 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Josh Bressers 2005-06-08 17:22:39 EDT

+++ This bug was initially created as a clone of Bug #159894 +++

Integer overflow in the BFD library for binutils allows attackers to
execute arbitrary code via a crafted object file that specifies a large number
of section headers, leading to a heap-based buffer overflow.

Comment 1 Josh Bressers 2005-06-08 17:23:08 EDT

I do not believe this issue has been fixed in FC4 yet.

Comment 2 Jakub Jelinek 2005-06-08 17:34:24 EDT

It has been:
* Wed May 25 2005 Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-2

- bfd and readelf robustification (CAN-2005-1704, #158680)

There is still the crash of objdump -r resp. objdump -dr when an object
contains invalid relocation values I fixed this week, but I don't think
we need a security errata for each such a bug.

Comment 3 Jakub Jelinek 2005-06-29 16:54:55 EDT

Updates for FC3 and FC4 released today.

Note You need to log in before you can comment on or make changes to this bug.