Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2014-8503
HistoryDec 09, 2014 - 11:59 p.m.

CVE-2014-8503

2014-12-0923:59:05
CWE-119
mitre
web.nvd.nist.gov
72
cve-2014-8503
stack-based buffer overflow
ihex_scan function
gnu binutils 2.24
denial of service

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

High

EPSS

0.009

Percentile

82.9%

JSON

Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.

Affected configurations

Nvd
Node
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20
OR
fedoraprojectfedoraMatch21
Node
gnubinutilsRange≤2.24
Node
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10
VendorProductVersionCPE
fedoraprojectfedora21cpe:/o:fedoraproject:fedora:21:::
fedoraprojectfedora20cpe:/o:fedoraproject:fedora:20:::
fedoraprojectfedora19cpe:/o:fedoraproject:fedora:19:::

References

Related

ubuntucve 1
debiancve 1
cvelist 1
nvd 1
prion 1
veracode 1
ibm 3
nessus 26
freebsd 1
openvas 20
fedora 9
redhat 1
centos 1
debian 3
osv 2
amazon 1
oraclelinux 1
mageia 1
archlinux 4
securityvulns 2
gentoo 1
ubuntu 1
photon 2
ubuntucve
ubuntucve
CVE-2014-8503
2014-12-09 00:00:00
debiancve
debiancve
CVE-2014-8503
2014-12-09 23:59:05
cvelist
cvelist
CVE-2014-8503
2014-12-09 22:52:00
nvd
nvd
CVE-2014-8503
2014-12-09 23:59:05
prion
prion
Stack overflow
2014-12-09 23:59:00
veracode
veracode
Arbitrary Code Execution
2020-12-06 04:26:30
ibm
ibm
Security Bulletin: A vulnerability in binutils affects IBM Flex System Manager (FSM): (CVE-2014-8501, CVE-2014-8502, CVE-2014-8503)
2019-01-31 01:45:01
Security Bulletin: Vulnerabilities in binutils affect IBM Chassis Management Module (CMM) (CVE-2014-8501 CVE-2014-8502 CVE-2014-8503)
2019-01-31 02:10:01
Security Bulletin: Multiple vulnerabilities in Gnu binutils affect PowerKVM
2018-06-18 01:30:35
nessus
nessus
FreeBSD : GNU binutils -- multiple vulnerabilities (f6a014cd-d268-11e4-8339-001e679db764)
2015-03-25 00:00:00
Fedora 20 : cross-binutils-2.25-3.fc20 (2015-0471)
2015-01-22 00:00:00
Fedora 20 : mingw-binutils-2.24-5.fc20 (2014-17603)
2015-01-02 00:00:00
freebsd
freebsd
GNU binutils -- multiple vulnerabilities
2014-12-09 00:00:00
openvas
openvas
Fedora Update for cross-binutils FEDORA-2015-0471
2015-01-22 00:00:00
Fedora Update for mingw-binutils FEDORA-2014-17603
2015-01-05 00:00:00
Fedora Update for mingw-binutils FEDORA-2014-17586
2015-01-05 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: cross-binutils-2.25-3.fc20
2015-01-21 23:05:23
[SECURITY] Fedora 21 Update: mingw-binutils-2.25-1.fc21
2015-01-02 05:07:07
[SECURITY] Fedora 20 Update: mingw-binutils-2.24-5.fc20
2015-01-02 05:06:02
redhat
redhat
(RHSA-2015:2079) Moderate: binutils security, bug fix, and enhancement update
2015-11-19 14:38:00
centos
centos
binutils security update
2015-11-30 19:23:41
debian
debian
[SECURITY] [DLA 184-1] binutils security update
2015-03-28 18:38:23
[SECURITY] [DSA 3123-1] binutils security update
2015-01-09 20:52:35
[SECURITY] [DSA 3123-2] binutils-mingw-w64 security update
2015-01-13 18:48:50
osv
osv
binutils - security update
2015-01-09 00:00:00
binutils - security update
2015-03-28 00:00:00
amazon
amazon
Medium: binutils
2015-12-14 10:00:00
oraclelinux
oraclelinux
binutils security, bug fix, and enhancement update
2015-11-23 00:00:00
mageia
mageia
Updated binutils packages fix security vulnerabilities
2015-01-19 19:47:36
archlinux
archlinux
mingw-w64-binutils: multiple issues
2014-11-19 00:00:00
binutils: multiple issues
2014-11-19 00:00:00
arm-none-eabi-binutils: multiple issues
2014-11-19 00:00:00
securityvulns
securityvulns
GNU binutils multiple security vulnerabilities
2015-01-14 00:00:00
[SECURITY] [DSA 3123-2] binutils-mingw-w64 security update
2015-01-14 00:00:00
gentoo
gentoo
Binutils: Multiple vulnerabilities
2016-12-08 00:00:00
ubuntu
ubuntu
GNU binutils vulnerabilities
2015-02-09 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0414
2023-06-20 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0601
2023-06-20 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

High

EPSS

0.009

Percentile

82.9%

JSON
Related for CVE-2014-8503
ubuntucve1debiancve1cvelist1nvd1prion1veracode1ibm3nessus26freebsd1openvas20fedora9redhat1centos1debian3osv2amazon1oraclelinux1mageia1archlinux4securityvulns2gentoo1ubuntu1photon2