Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6381.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6381-1)
Summary:	The remote host is missing an update for the 'binutils' package(s) announced via the USN-6381-1 advisory.
Description:	Summary: The remote host is missing an update for the 'binutils' package(s) announced via the USN-6381-1 advisory. Vulnerability Insight: It was discovered that a memory leak existed in certain GNU binutils modules. An attacker could possibly use this issue to cause a denial of service (memory exhaustion). (CVE-2020-19724, CVE-2020-21490) It was discovered that GNU binutils was not properly performing bounds checks in several functions, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute arbitrary code. (CVE-2020-19726, CVE-2021-46174, CVE-2022-45703) It was discovered that GNU binutils was not properly initializing heap memory when processing certain print instructions. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-35342) It was discovered that GNU binutils was not properly handling the logic behind certain memory management related operations, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-44840) It was discovered that GNU binutils was not properly handling the logic behind certain memory management related operations, which could lead to an invalid memory access. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-47695) Affected Software/OS: 'binutils' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-19724 https://sourceware.org/bugzilla/show_bug.cgi?id=25362 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=805f38bc551de820bcd7b31d3c5731ae27cf853a Common Vulnerability Exposure (CVE) ID: CVE-2020-19726 https://sourceware.org/bugzilla/show_bug.cgi?id=26240 https://sourceware.org/bugzilla/show_bug.cgi?id=26241 Common Vulnerability Exposure (CVE) ID: CVE-2020-21490 https://sourceware.org/bugzilla/show_bug.cgi?id=25249 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=378fd436405b3051df34ac995b2e03fe1f3d1907 Common Vulnerability Exposure (CVE) ID: CVE-2020-35342 https://sourceware.org/bugzilla/show_bug.cgi?id=25319 Common Vulnerability Exposure (CVE) ID: CVE-2021-46174 https://sourceware.org/bugzilla/show_bug.cgi?id=28753 Common Vulnerability Exposure (CVE) ID: CVE-2022-44840 https://sourceware.org/bugzilla/show_bug.cgi?id=29732 Common Vulnerability Exposure (CVE) ID: CVE-2022-45703 https://sourceware.org/bugzilla/show_bug.cgi?id=29799 Common Vulnerability Exposure (CVE) ID: CVE-2022-47695 https://sourceware.org/bugzilla/show_bug.cgi?id=29846
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.