CVE-2023-25584

An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

• SECURITY UPDATE: fixing the existing CVE-2017-12450 patches that were incorrectly ported from upstream
  • debian/patches/CVE-2017-12450-1.patch: fix address violation errors
  • debian/patches/CVE-2017-12450-2.patch: import patches from mainline to fix minor binutils bugs
  • CVE-2017-12450
• SECURITY UPDATE: heap-based buffer overflow
  • debian/patches/CVE-2023-25584.patch: lack of bounds checking in vms-alpha.c
  • CVE-2023-25584
• SECURITY UPDATE: segmentation fault due to uninitialized
  • debian/patches/CVE-2023-25585.patch: field file_table of struct module is uninitialized
  • CVE-2023-25585
• SECURITY UPDATE: segmentation fault due to uninitialized
  • debian/patches/CVE-2023-25588.patch: field the_bfd of asymbol is uninitialised
  • CVE-2023-25588
• Fix memory leaks and buffer overflow in vms-alpha.c
  • debian/patches/vms-alpha-buffer-overflow-fix.patch: fix heap-based buffer overflow in build_module_list in vms-alpha.c
  • debian/patches/vms-alpha-memory-leaks-fix.patch: fix memory leaks and buffer overflow in vms-alpha.c

• SECURITY UPDATE: multiple vulnerabilities in vms-alpha.c parse_module
  • debian/patches/CVE-2022-47673_CVE-2023-25584-*.patch: fix null pointer dereference in parse_module by adding return value checking for bfd_zalloc calls, fix potential out of bounds memory access in DST record parsing loop
  • CVE-2022-47673, CVE-2023-25584

• CVE-2022-44840: fix heap buffer overflow in find_section_in_set in dwarf.c
• CVE-2023-25584: fix lack of bounds checking in vms-alpha.c parse_module
• CVE-2022-47673: fix OOB reads in parse_module
• CVE-2022-47696: fix uninitialised the_bfd field in mach-o.c synthetic symbols
• CVE-2022-45703: fix heap buffer overflow in display_gdb_index in dwarf.c

• CVE-2022-47673: fix out-of-bounds reads in parse_module (bfd/vms-alpha.c), combined backport of upstream commits c9178f28, 942fa4fb, 77c225bd, 65cf035b and c093f5ee (patch also covers CVE-2023-25584)
• CVE-2022-47695: fix segfault in objdump compare_symbols on synthetic plt symbols
• CVE-2022-47696: fix out-of-bounds read in bfd/mach-o.c bfd_mach_o_get_synthetic_symtab

It was discovered that GNU binutils incorrectly handled certain DWARF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 22.10. (CVE-2023-1579)

It was discovered that GNU binutils did not properly verify the version definitions in zer0-lengthverdef table. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. (CVE-2023-1972)

It was discovered that GNU binutils did not properly validate the size of length parameter in vms-alpha. An attacker could possibly use this issue to cause a crash or access sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2023-25584)

It was discovered that GNU binutils did not properly initialized the file_table field of struct module and the_bfd field of asymbol. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-25585, CVE-2023-25588)