CVE-2019-9924: bash rbash escape via fall-back script interpretation and BASH_CMDS

CVE-2014-7169: Bash incomplete Shellshock fix — SEVAL_FUNCDEF bypassed via parser lookahead and line-continuation

CVE-2014-7169 — Bash Shellshock secondary injection via function-name parser interpolation

CVE-2014-7169: Shellshock secondary command-injection via invalid function identifiers

posted 3 months ago

CVE-2019-18276: Bash restricted-bypass via enable builtin loading shared objects during startup

Bash CVE-2019-18276: Restricted Shell Bypass via Implicit Builtin Loading

posted 3 months ago

CVE-2019-18276: bash disable_priv_mode leaks saved UID, exploitable via 'enable -f'

CVE-2014-6271: Shellshock - Function definition injection via environment variables

CVE-2014-6271 Shellshock: Bash executes trailing commands after function definition imported from env vars

CVE-2014-6271 Shellshock — bash function-import parser boundary bug

CVE-2023-1579: Heap overflow in binutils BFD COFF relocation handling

CVE-2021-3487: OOB read in binutils readelf fetch_indexed_string (DWARF .debug_str_offsets)

significantruntimecposted 3 months ago

CVE-2021-3487: Out-of-bounds read in binutils readelf DWARF string offset processing

CVE-2020-16592: UAF in binutils BFD section merging

CVE-2022-38126: Memory leak in binutils BFD read_abbrevs() — unlinked cur_abbrev->attrs not freed on bfd_realloc failure

CVE-2022-38126: memory leak in binutils display_debug_abbrev

CVE-2022-38126: Memory Leak in BFD DWARF Abbreviation Table Handling

CVE-2017-8421: binutils objdump unbounded memory allocation via crafted ELF e_phnum / sh_size

CVE-2017-8421: binutils objdump unbounded allocation from forged ELF section metadata

CVE-2017-8421: Unbounded Memory Allocation in ELF Relocation Section Parsing