cbcvebase.
CVE-2014-8504
published 2014-12-09

CVE-2014-8504: Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service…

high7.5CVSS 3.1
AVNACLAuNCPIPAP
Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.

Affected

15 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debianbinutils< binutils 2.24.90.20141104-1 (bookworm)binutils 2.24.90.20141104-1 (bookworm)
debianbinutils-mingw-w64< binutils 2.24.90.20141104-1 (bookworm)binutils 2.24.90.20141104-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
gnubinutils<= 2.24
gnubinutils>= 0 < 2.24.90.20141104-12.24.90.20141104-1
gnubinutils>= 0 < 2.24.90.20141104-12.24.90.20141104-1
gnubinutils>= 0 < 2.24.90.20141104-12.24.90.20141104-1
gnubinutils>= 0 < 2.24.90.20141104-12.24.90.20141104-1
gnubinutils>= 0 < 2.24-5ubuntu3.12.24-5ubuntu3.1

CVSS provenance

nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH