NVD

Id
35688  
Name
CVE-2014-8737  
Description
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-09  
Modified Date
2016-10-14  
Seq
2014-8737  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182802 35688 CVE-2014-8737 FEDORA-2014-14833  View
182803 35688 CVE-2014-8737 FEDORA-2014-14888  View
182804 35688 CVE-2014-8737 FEDORA-2014-14874  View
182805 35688 CVE-2014-8737 FEDORA-2014-17603  View
182806 35688 CVE-2014-8737 FEDORA-2014-17586  View
182807 35688 CVE-2014-8737 FEDORA-2015-0471  View
182808 35688 CVE-2014-8737 FEDORA-2015-0750  View
182809 35688 CVE-2014-8737 MDVSA-2015:029  View
182810 35688 CVE-2014-8737 [oss-security] 20141113 Re: CVE Request: binutils -- directory traversal  View
182811 35688 CVE-2014-8737 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
182812 35688 CVE-2014-8737 70908  View
182813 35688 CVE-2014-8737 USN-2496-1  View
182814 35688 CVE-2014-8737 https://bugzilla.redhat.com/show_bug.cgi?id=1162655  View
182815 35688 CVE-2014-8737 https://sourceware.org/bugzilla/show_bug.cgi?id=17533  View
182816 35688 CVE-2014-8737 https://sourceware.org/bugzilla/show_bug.cgi?id=17552  View
182817 35688 CVE-2014-8737 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=dd9b91de2149ee81d47f708e7b0bbf57da10ad42  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16976 JVNDB-2014-005851 GNU Binutils におけるディレクトリトラバーサルの脆弱性 GNU Binutils には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-8737 76030 CVE-2014-8737 35688 3.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005851.html 2014-11-04 2014-12-11 View