CVE-2014-8485

Description

The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.

Weakness classification

• CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references

• cve@mitre.org — Exploit, Press/Media Coverage
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Broken Link