Summary
It was discovered that GNU binutils incorrectly handled certain COFF files.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533)
It was discovered that GNU binutils was not properly performing bounds
checks in several functions, which could lead to a buffer overflow. An
attacker could possibly use this issue to cause a denial of service,
expose sensitive information or execute arbitrary code. This issue only
affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
(CVE-2022-4285, CVE-2020-19726, CVE-2021-46174)
It was discovered that GNU binutils contained a reachable assertion, which
could lead to an intentional assertion failure when processing certain
crafted DWARF files. An attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 20.04 LTS
and Ubuntu 22.04 LTS. (CVE-2022-35205)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | binutils | 2.34-6ubuntu1.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | binutils | 2.38-4ubuntu2.4 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | binutils | 2.24-5ubuntu14.2+esm6 |
Vulnerabilities 5
-
Medium 5.5
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows…
-
Medium 5.5
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version …
-
Unscored —
An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or wri…
-
Unscored —
Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
-
Unscored —
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the stri…