Description
The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | binutils | 2.24.90.20141104-1 | — |
| Debian 14 | binutils-mingw-w64 | 5.2 | — |
| Debian 13 | binutils | 2.24.90.20141104-1 | — |
| Debian 13 | binutils-mingw-w64 | 5.2 | — |
| Debian 12 | binutils | 2.24.90.20141104-1 | — |
| Debian 12 | binutils-mingw-w64 | 5.2 | — |
| Debian 7 | binutils | 2.22-8+deb7u2 | DSA-3123-1 |
| Debian 7 | binutils-mingw-w64 | 2+deb7u1 | DSA-3123-2 |
| Debian 6.0 | binutils | 2.20.1-16+deb6u1 | DLA-184-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | binutils | 2.24-5ubuntu3.1 | USN-2496-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | binutils +1 | 2.23.52.0.1-55.el7 | RHSA-2015:2079 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | binutils +1 | 2.23.52.0.1-55.el7 | ELSA-2015-2079 |
Advisories 6
- RHSA-2015:2079 Red Hat Security Advisory: binutils security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-2496-1 binutils vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-3123-1 binutils - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3123-2 binutils-mingw-w64 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-184-1 binutils - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ELSA-2015-2079 Moderate: binutils security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 23, 2015
References
- 62241 third-party-advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=17510
- MDVSA-2015:029 vendor-advisory
- USN-2496-1 vendor-advisory
- FEDORA-2014-14995 vendor-advisory
- 70741 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1157276
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- [oss-security] 20141026 Re: strings / libbfd crasher mailing-list
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Ba=commit%3Bh=493a33860c71cac998f1a56d6d87d6faa801fbaa
- FEDORA-2014-14963 vendor-advisory
- 62746 third-party-advisory
- FEDORA-2014-14838 vendor-advisory
- http://lcamtuf.blogspot.co.uk/2014/10/psa-dont-run-strings-on-untrusted-files.html
- GLSA-201612-24 vendor-advisory