The vulnerability of the _bfd_generic_read_minisymbols function in the GNU Binutils set of system utilities, related to memory overflow, allows an attacker to trigger a service failure.

🗓️ 22 Mar 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Memory overflow in _bfd_generic_read_minisymbols of the descriptor library BFD in binutils can cause a service failure.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics for NPS	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics	13 Jan 202115:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local	20 Dec 201913:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	23 Jul 202009:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
AlpineLinux	CVE-2018-20002	10 Dec 201802:00	–	alpinelinux
ArchLinux	[ASA-201906-3] binutils: multiple issues	4 Jun 201900:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in binutils	20 May 202605:53	–	astralinux
Cloud Foundry	USN-4336-1: GNU binutils vulnerabilities \| Cloud Foundry	14 May 202000:00	–	cloudfoundry
CloudLinux	Fix of CVE: CVE-2018-18605, CVE-2019-12972, CVE-2016-4490, CVE-2018-6543, CVE-2018-19931, CVE-2018-10535, CVE-2019-17450, CVE-2018-7643, CVE-2016-4487, CVE-2016-4492, CVE-2018-20002, CVE-2018-1000876, CVE-2019-9073, CVE-2019-9075, CVE-2018-20671, CVE-2016-4488, CVE-2018-7568, CVE-2018-7642, CVE-2018-10373, CVE-2018-6323, CVE-2016-2226, CVE-2016-4493, CVE-2018-19932, CVE-2018-6759, CVE-2019-9077, CVE-2018-18607, CVE-2018-8945, CVE-2018-7208, CVE-2016-6131, CVE-2018-13033, CVE-2018-20623, CVE-2019-14444, CVE-2018-18309, CVE-2018-18606, CVE-2018-7569, CVE-2016-4489	16 Dec 202116:02	–	cloudlinux

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssb-439005.pdf
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20190221-0004/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.3/
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
web	www.web.nvd.nist.gov/view/vuln/detail

13 Nov 2023 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.9

CVSS 35.5

EPSS0.01819

memory overflow service failure memory leak bfd minisymbols descriptor library elf file binutils