Medium WID-SEC-2024-1420 6 CVEs

binutils: Mehrere Schwachstellen ermöglichen Denial of Service

Published Dec 10, 2020 · Updated Jun 19, 2024 · Revision 7 · de-DE

Vendor: SUSE Vendor: Ubuntu Product: Linux Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten

Vulnerabilities 6

Unscored —

CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process…

binutils Debian

Dec 9, 2020
Unscored —

CVE-2020-16591

A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid rea…

binutils Debian

Dec 9, 2020
Unscored —

CVE-2020-16592

A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash…

binutils binutils Debian Ubuntu

Dec 9, 2020
Unscored —

CVE-2020-16593

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distribute…

binutils Debian

Dec 9, 2020
Unscored —

CVE-2020-16598 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

Dec 9, 2020
Unscored —

CVE-2020-16599

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distribute…

binutils Debian

Dec 9, 2020

Revision history

2024-06-19 #7
Neue Updates von Ubuntu aufgenommen
2022-03-22 #6
Neue Updates von SUSE aufgenommen
2021-11-04 #5
Neue Updates von SUSE aufgenommen
2021-11-02 #4
Neue Updates von SUSE aufgenommen
2021-10-25 #3
Neue Updates von Ubuntu aufgenommen
2020-12-20 #2
Referenz(en) aufgenommen: FEDORA-2020-18EC0BF4BB, FEDORA-2020-F903E139B1
2020-12-10 #1
Initiale Fassung

References

NIST Vulnerability Database vom 2020-12-10
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16590
NIST Vulnerability Database vom 2020-12-10
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16591
NIST Vulnerability Database vom 2020-12-10
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16592
NIST Vulnerability Database vom 2020-12-10
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16593
NIST Vulnerability Database vom 2020-12-10
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16598
NIST Vulnerability Database vom 2020-12-10
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16599
Ubuntu Security Notice USN-5124-1 vom 2021-10-25
https://ubuntu.com/security/notices/USN-5124-1
SUSE Security Update SUSE-SU-2021:3616-1 vom 2021-11-04
https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html
SUSE Security Update SUSE-SU-2021:3593-1 vom 2021-11-02
https://lists.suse.com/pipermail/sle-security-updates/2021-November/009687.html
SUSE Security Update SUSE-SU-2022:0934-1 vom 2022-03-22
https://lists.suse.com/pipermail/sle-security-updates/2022-March/010497.html
Ubuntu Security Notice USN-6842-1 vom 2024-06-20
https://ubuntu.com/security/notices/USN-6842-1