| Descripción: | Summary:
The remote host is missing an update for the 'binutils' package(s) announced via the MGASA-2019-0169 advisory.
Vulnerability Insight:
This update provides the latest stable binutils, currently version 2.32
and fixes at least the following security issues:
ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when
printing bad bytes in Intel Hex objects (CVE-2014-9939)
Use-after-free vulnerability in libiberty allows remote attackers to cause
a denial of service (segmentation fault and crash) via a crafted binary,
related to 'btypevec.' (CVE-2016-4487)
Use-after-free vulnerability in libiberty allows remote attackers to cause
a denial of service (segmentation fault and crash) via a crafted binary,
related to 'ktypevec.' (CVE-2016-4488)
Integer overflow in the gnu_special function in libiberty allows remote
attackers to cause a denial of service (segmentation fault and crash) via
a crafted binary, related to the 'demangling of virtual tables.'
(CVE-2016-4489)
Integer overflow in cp-demangle.c in libiberty allows remote attackers to
cause a denial of service (segmentation fault and crash) via a crafted
binary, related to inconsistent use of the long and int types for lengths.
(CVE-2016-4490)
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows
remote attackers to cause a denial of service (segmentation fault and
crash) via a crafted binary. (CVE-2016-4492)
The demangle_template_value_parm and do_hpacc_template_literal functions
in cplus-dem.c in libiberty allow remote attackers to cause a denial of
service (out-of-bounds read and crash) via a crafted binary.
(CVE-2016-4493)
The demangler in GNU Libiberty allows remote attackers to cause a denial
of service (infinite loop, stack overflow, and crash) via a cycle in the
references of remembered mangled types. (CVE-2016-6131)
readelf in GNU Binutils 2.28 writes to illegal addresses while processing
corrupt input files containing symbol-difference relocations, leading to
a heap-based buffer overflow. (CVE-2017-6965)
readelf in GNU Binutils 2.28 has a use-after-free (specifically
read-after-free) error while processing multiple, relocated sections in an
MSP430 binary. This is caused by mishandling of an invalid symbol index,
and mishandling of state across invocations. (CVE-2017-6966)
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read
while processing corrupt RL78 binaries. The vulnerability can trigger
program crashes. It may lead to an information leak as well. (CVE-2017-6969)
The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses
a NULL pointer while reading section contents in a corrupt binary, leading
to a program crash. (CVE-2017-7209)
objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer
over-reads (of size 1 and size 8) while handling corrupt STABS enum type
strings in a crafted object file, leading to program crash. (CVE-2017-7210)
GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer
overflow (of size 1) while attempting to ... [Please see the references for more information on the vulnerabilities]
Affected Software/OS:
'binutils' package(s) on Mageia 6.
Solution:
Please install the updated package(s).
CVSS Score:
7.5
CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
