[SECURITY] [DLA 184-1] binutils security update

2015-03-2818:38:23

lists.debian.org

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

JSON

Package : binutils
Version : 2.20.1-16+deb6u1
CVE ID : CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 CVE-2014-8502
CVE-2014-8503 CVE-2014-8504 CVE-2014-8737 CVE-2014-8738

Multiple security issues have been found in binutils, a toolbox for
binary file manipulation. These vulnerabilities include multiple memory
safety errors, buffer overflows, use-after-frees and other implementation
errors may lead to the execution of arbitrary code, the bypass of security
restrictions, path traversal attack or denial of service.

OSVersionArchitecturePackageVersionFilename
Debian7mipsbinutils-mingw-w64-i686< 2.22-8+deb7u2+2+deb7u1binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_mips.deb
Debian7mipselbinutils< 2.22-8+deb7u2binutils_2.22-8+deb7u2_mipsel.deb
Debian7s390binutils-dev< 2.22-8+deb7u2binutils-dev_2.22-8+deb7u2_s390.deb
Debian7amd64binutils< 2.22-8+deb7u2binutils_2.22-8+deb7u2_amd64.deb
Debian7kfreebsd-amd64binutils-dev< 2.22-8+deb7u2binutils-dev_2.22-8+deb7u2_kfreebsd-amd64.deb
Debian7kfreebsd-i386binutils-mingw-w64-i686< 2.22-8+deb7u2+2+deb7u1binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_kfreebsd-i386.deb
Debian7powerpcbinutils-dev< 2.22-8+deb7u2binutils-dev_2.22-8+deb7u2_powerpc.deb
Debian7mipsbinutils-multiarch< 2.22-8+deb7u2binutils-multiarch_2.22-8+deb7u2_mips.deb
Debian6allbinutils-doc< 2.20.1-16+deb6u1binutils-doc_2.20.1-16+deb6u1_all.deb
Debian6i386binutils-dev< 2.20.1-16+deb6u1binutils-dev_2.20.1-16+deb6u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	mips	binutils-mingw-w64-i686	< 2.22-8+deb7u2+2+deb7u1	binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_mips.deb
Debian	7	mipsel	binutils	< 2.22-8+deb7u2	binutils_2.22-8+deb7u2_mipsel.deb
Debian	7	s390	binutils-dev	< 2.22-8+deb7u2	binutils-dev_2.22-8+deb7u2_s390.deb
Debian	7	amd64	binutils	< 2.22-8+deb7u2	binutils_2.22-8+deb7u2_amd64.deb
Debian	7	kfreebsd-amd64	binutils-dev	< 2.22-8+deb7u2	binutils-dev_2.22-8+deb7u2_kfreebsd-amd64.deb
Debian	7	kfreebsd-i386	binutils-mingw-w64-i686	< 2.22-8+deb7u2+2+deb7u1	binutils-mingw-w64-i686_2.22-8+deb7u2+2+deb7u1_kfreebsd-i386.deb
Debian	7	powerpc	binutils-dev	< 2.22-8+deb7u2	binutils-dev_2.22-8+deb7u2_powerpc.deb
Debian	7	mips	binutils-multiarch	< 2.22-8+deb7u2	binutils-multiarch_2.22-8+deb7u2_mips.deb
Debian	6	all	binutils-doc	< 2.20.1-16+deb6u1	binutils-doc_2.20.1-16+deb6u1_all.deb
Debian	6	i386	binutils-dev	< 2.20.1-16+deb6u1	binutils-dev_2.20.1-16+deb6u1_i386.deb