Updated binutils packages fix security vulnerabilities

2021-01-0818:34:55

Gentoo Foundation

advisories.mageia.org

binutils

vulnerabilities

mingw-binutils

dos

unix

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

64.3%

JSON

It was discovered that mingw-binutils and binutils suffered from two vulnerabilites which might lead to DoS. Null Pointer Dereference in debug_get_real_type could result in DoS (CVE-2020-16598). Use-after-free in bfd_hash_lookup could result in DoS (CVE-2020-16592).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchbinutils< 2.33.1-1.1binutils-2.33.1-1.1.mga7
Mageia7noarchmingw-binutils< 2.30-3.1mingw-binutils-2.30-3.1.mga7
Mageia7noarchcross-binutils< 2.31.1-1.1cross-binutils-2.31.1-1.1.mga7

OS	Version	Architecture	Package	Version	Filename
Mageia	7	noarch	binutils	< 2.33.1-1.1	binutils-2.33.1-1.1.mga7
Mageia	7	noarch	mingw-binutils	< 2.30-3.1	mingw-binutils-2.30-3.1.mga7
Mageia	7	noarch	cross-binutils	< 2.31.1-1.1	cross-binutils-2.31.1-1.1.mga7