The vulnerability of the IS_CONTAINED_BY_LMA macro in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

🗓️ 14 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

IS_CONTAINED_BY_LMA macro in bfd/elf.c has an integer overflow enabling remote service failure.

Reporter	Title	Published	Views	Family All 90
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics for NPS	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics	13 Jan 202115:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local	20 Dec 201913:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	23 Jul 202009:47	–	ibm
AlpineLinux	CVE-2018-19932	7 Dec 201807:00	–	alpinelinux
ArchLinux	[ASA-201906-3] binutils: multiple issues	4 Jun 201900:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in binutils	19 Jun 202611:10	–	astralinux
Cloud Foundry	USN-4336-1: GNU binutils vulnerabilities \| Cloud Foundry	14 May 202000:00	–	cloudfoundry
CloudLinux	Fix of CVE: CVE-2018-18605, CVE-2019-12972, CVE-2016-4490, CVE-2018-6543, CVE-2018-19931, CVE-2018-10535, CVE-2019-17450, CVE-2018-7643, CVE-2016-4487, CVE-2016-4492, CVE-2018-20002, CVE-2018-1000876, CVE-2019-9073, CVE-2019-9075, CVE-2018-20671, CVE-2016-4488, CVE-2018-7568, CVE-2018-7642, CVE-2018-10373, CVE-2018-6323, CVE-2016-2226, CVE-2016-4493, CVE-2018-19932, CVE-2018-6759, CVE-2019-9077, CVE-2018-18607, CVE-2018-8945, CVE-2018-7208, CVE-2016-6131, CVE-2018-13033, CVE-2018-20623, CVE-2019-14444, CVE-2018-18309, CVE-2018-18606, CVE-2018-7569, CVE-2016-4489	16 Dec 202116:02	–	cloudlinux

Vulners

Node

gnu_general_public_license gnu_binutilsRange<2.32

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-19932
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.3/
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20241017SE16
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47
web	www.web.nvd.nist.gov/view/vuln/detail

11 Nov 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 36.5

CVSS 27.8

EPSS0.01908

contained by lma bfd elf integer overflow remote attack service failure gnu binutils