Summary
USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that GNU binutils contained a large number of security
issues. If a user or automated system were tricked into processing a
specially-crafted file, a remote attacker could cause GNU binutils to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | binutils | 2.26.1-1ubuntu1~16.04.8+esm1 |
Vulnerabilities 147
-
Medium 5.5
In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archi…
-
Unscored —CVE-2016-2226 Public exploit
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrar…
-
Unscored —
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and …
-
Unscored —
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and …
-
Unscored —
Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segment…
-
Unscored —
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault…
-
Unscored —
The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentat…
-
Unscored —
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of servic…
-
Unscored —
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attac…
-
Unscored —
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and…
-
Unscored —
The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in…
-
Unscored —
The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist…
-
Unscored —
The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distrib…
-
Unscored —
The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) li…
-
Unscored —
The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (a…
-
Unscored —
The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed i…
-
Unscored —
The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distri…
-
Unscored —
The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed…
-
Unscored —
The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to ca…
-
Unscored —
The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist…
-
Unscored —
The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), a…
-
Unscored —
The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as…
-
Unscored —
The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buff…
-
Unscored —
The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutil…
-
Unscored —
The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
-
Unscored —
The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G…
-
Unscored —
The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B…
-
Unscored —
The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist…
-
Unscored —
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (…
-
Unscored —
The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G…
-
Unscored —
Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in…
-
Unscored —
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
-
Unscored —
_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU …
-
Unscored —CVE-2017-14939 Public exploit
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
-
Unscored —
scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
-
Unscored —
dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles poin…
-
Unscored —
bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B…
-
Unscored —
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not valida…
-
Unscored —
find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU…
-
Unscored —
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
-
Unscored —
_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in …
-
Unscored —
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates D…
-
Unscored —
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL…
-
Unscored —
elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory alloca…
-
Unscored —
The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distribut…
-
Unscored —
The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distribu…
-
Unscored —
The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of servic…
-
Unscored —
coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not val…
-
Unscored —
The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed …
-
Unscored —
elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validat…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers t…
-
Unscored —
The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distribu…
-
Unscored —
The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist…
-
Unscored —
nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a de…
-
Unscored —
readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-differe…
-
Unscored —
readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, reloc…
-
Unscored —
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The…
-
Unscored —
The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section conten…
-
Unscored —
objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handli…
-
Unscored —
GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an E…
-
Unscored —
The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disa…
-
Unscored —
The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and …
-
Unscored —
The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
-
Unscored —
GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input scrip…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of siz…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbol…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbol…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out fu…
-
Unscored —
elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member …
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global b…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid…
-
Unscored —
dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corr…
-
Unscored —
The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed…
-
Unscored —
GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra…
-
Unscored —
GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with…
-
Unscored —
GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application …
-
Unscored —
GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra…
-
Unscored —
readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attacke…
-
Unscored —
The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause …
-
Unscored —CVE-2017-9742 Public exploit
The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of se…
-
Unscored —
The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as …
-
Unscored —
The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distri…
-
Unscored —CVE-2017-9746 Public exploit
The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2017-9747 Public exploit
The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G…
-
Unscored —CVE-2017-9748 Public exploit
The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GN…
-
Unscored —CVE-2017-9749 Public exploit
The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffe…
-
Unscored —CVE-2017-9750 Public exploit
opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers …
-
Unscored —
opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a d…
-
Unscored —
bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows r…
-
Unscored —
The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distribut…
-
Unscored —
The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in …
-
Unscored —
opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote att…
-
Unscored —CVE-2017-9756 Public exploit
The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a …
-
Unscored —
The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
-
Unscored —
binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bou…
-
Unscored —
process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based bu…
-
Unscored —
concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.…
-
Unscored —
The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka li…
-
Unscored —
The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GN…
-
Unscored —
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustio…
-
Unscored —
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cp…
-
Unscored —
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger exc…
-
Unscored —
finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) …
-
Unscored —CVE-2018-12700 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excess…
-
Unscored —
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer d…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consum…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …
-
Unscored —
The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs…
-
Unscored —
A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File …
-
Unscored —
An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbf…
-
Unscored —
An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consum…
-
Unscored —
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consum…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils throug…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils throug…
-
Unscored —
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distr…
-
Unscored —
load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that…
-
Unscored —CVE-2018-6323 Public exploit
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU …
-
Unscored —
In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which res…
-
Unscored —
The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distrib…
-
Unscored —
In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distribut…
-
Unscored —
The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binu…
-
Unscored —
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote a…
-
Unscored —
The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G…
-
Unscored —
The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service …
-
Unscored —
The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in…
-
Unscored —
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object…
-
Unscored —
apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a wri…
-
Unscored —
find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binu…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d…
-
Unscored —
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_cou…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c …
References
-
report
https://ubuntu.com/security/CVE-2016-2226
-
report
https://ubuntu.com/security/CVE-2016-4487
-
report
https://ubuntu.com/security/CVE-2016-4488
-
report
https://ubuntu.com/security/CVE-2016-4489
-
report
https://ubuntu.com/security/CVE-2016-4490
-
report
https://ubuntu.com/security/CVE-2016-4491
-
report
https://ubuntu.com/security/CVE-2016-4492
-
report
https://ubuntu.com/security/CVE-2016-4493
-
report
https://ubuntu.com/security/CVE-2016-6131
-
report
https://ubuntu.com/security/CVE-2017-6965
-
report
https://ubuntu.com/security/CVE-2017-6966
-
report
https://ubuntu.com/security/CVE-2017-6969
-
report
https://ubuntu.com/security/CVE-2017-7209
-
report
https://ubuntu.com/security/CVE-2017-7210
-
report
https://ubuntu.com/security/CVE-2017-7223
-
report
https://ubuntu.com/security/CVE-2017-7224
-
report
https://ubuntu.com/security/CVE-2017-7225
-
report
https://ubuntu.com/security/CVE-2017-7226
-
report
https://ubuntu.com/security/CVE-2017-7227
-
report
https://ubuntu.com/security/CVE-2017-7299
-
report
https://ubuntu.com/security/CVE-2017-7300
-
report
https://ubuntu.com/security/CVE-2017-7301
-
report
https://ubuntu.com/security/CVE-2017-7302
-
report
https://ubuntu.com/security/CVE-2017-7614
-
report
https://ubuntu.com/security/CVE-2017-8393
-
report
https://ubuntu.com/security/CVE-2017-8394
-
report
https://ubuntu.com/security/CVE-2017-8395
-
report
https://ubuntu.com/security/CVE-2017-8396
-
report
https://ubuntu.com/security/CVE-2017-8397
-
report
https://ubuntu.com/security/CVE-2017-8398
-
report
https://ubuntu.com/security/CVE-2017-8421
-
report
https://ubuntu.com/security/CVE-2017-9038
-
report
https://ubuntu.com/security/CVE-2017-9039
-
report
https://ubuntu.com/security/CVE-2017-9040
-
report
https://ubuntu.com/security/CVE-2017-9041
-
report
https://ubuntu.com/security/CVE-2017-9042
-
report
https://ubuntu.com/security/CVE-2017-9044
-
report
https://ubuntu.com/security/CVE-2017-9742
-
report
https://ubuntu.com/security/CVE-2017-9744