Summary
It was discovered that GNU binutils contained a large number of security
issues. If a user or automated system were tricked into processing a
specially-crafted file, a remote attacker could cause GNU binutils to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | binutils | 2.30-21ubuntu1~18.04.3 |
Vulnerabilities 44
-
Medium 5.5
In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archi…
-
Unscored —
binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bou…
-
Unscored —
process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based bu…
-
Unscored —
concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.…
-
Unscored —
The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka li…
-
Unscored —
The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GN…
-
Unscored —
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustio…
-
Unscored —
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cp…
-
Unscored —
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger exc…
-
Unscored —
finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) …
-
Unscored —CVE-2018-12700 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excess…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer d…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consum…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs…
-
Unscored —
A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File …
-
Unscored —
An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbf…
-
Unscored —
An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consum…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consum…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils throug…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils throug…
-
Unscored —
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distr…
-
Unscored —
A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BF…
-
Unscored —
load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that…
-
Unscored —
The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in…
-
Unscored —
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object…
-
Unscored —
apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a wri…
-
Unscored —
find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binu…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d…
-
Unscored —
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_cou…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c …
References
-
report
https://ubuntu.com/security/CVE-2018-8945
-
report
https://ubuntu.com/security/CVE-2018-9138
-
report
https://ubuntu.com/security/CVE-2018-10372
-
report
https://ubuntu.com/security/CVE-2018-10373
-
report
https://ubuntu.com/security/CVE-2018-10534
-
report
https://ubuntu.com/security/CVE-2018-10535
-
report
https://ubuntu.com/security/CVE-2018-12641
-
report
https://ubuntu.com/security/CVE-2018-12697
-
report
https://ubuntu.com/security/CVE-2018-12698
-
report
https://ubuntu.com/security/CVE-2018-12699
-
report
https://ubuntu.com/security/CVE-2018-12700
-
report
https://ubuntu.com/security/CVE-2018-12934
-
report
https://ubuntu.com/security/CVE-2018-13033
-
report
https://ubuntu.com/security/CVE-2018-17358
-
report
https://ubuntu.com/security/CVE-2018-17359
-
report
https://ubuntu.com/security/CVE-2018-17360
-
report
https://ubuntu.com/security/CVE-2018-17794
-
report
https://ubuntu.com/security/CVE-2018-17985
-
report
https://ubuntu.com/security/CVE-2018-18309
-
report
https://ubuntu.com/security/CVE-2018-18483
-
report
https://ubuntu.com/security/CVE-2018-18484
-
report
https://ubuntu.com/security/CVE-2018-18605
-
report
https://ubuntu.com/security/CVE-2018-18606
-
report
https://ubuntu.com/security/CVE-2018-18607
-
report
https://ubuntu.com/security/CVE-2018-18700
-
report
https://ubuntu.com/security/CVE-2018-18701
-
report
https://ubuntu.com/security/CVE-2018-19931
-
report
https://ubuntu.com/security/CVE-2018-19932
-
report
https://ubuntu.com/security/CVE-2018-20002
-
report
https://ubuntu.com/security/CVE-2018-20623
-
report
https://ubuntu.com/security/CVE-2018-20651
-
report
https://ubuntu.com/security/CVE-2018-20671
-
report
https://ubuntu.com/security/CVE-2018-1000876
-
report
https://ubuntu.com/security/CVE-2019-9070
-
report
https://ubuntu.com/security/CVE-2019-9071
-
report
https://ubuntu.com/security/CVE-2019-9073
-
report
https://ubuntu.com/security/CVE-2019-9074
-
report
https://ubuntu.com/security/CVE-2019-9075
-
report
https://ubuntu.com/security/CVE-2019-9077