Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3368-1
HistoryJul 26, 2017 - 12:00 a.m.

libiberty vulnerabilities

2017-07-2600:00:00
ubuntu.com
34

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.026 Low

EPSS

Percentile

90.1%

JSON

Releases

  • Ubuntu 17.04
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • libiberty - library of utility functions used by GNU programs

Details

It was discovered that libiberty incorrectly handled certain string
operations. If a user or automated system were tricked into processing a
specially crafted binary, a remote attacker could use this issue to cause
libiberty to crash, resulting in a denial of service, or possibly execute
arbitrary code. This issue only applied to Ubuntu 14.04 LTS and Ubuntu
16.04 LTS. (CVE-2016-2226)

It was discovered that libiberty incorrectly handled parsing certain
binaries. If a user or automated system were tricked into processing a
specially crafted binary, a remote attacker could use this issue to cause
libiberty to crash, resulting in a denial of service. This issue only
applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-4487,
CVE-2016-4488, CVE-2016-4489, CVE-2016-4490, CVE-2016-4492, CVE-2016-4493,
CVE-2016-6131)

It was discovered that libiberty incorrectly handled parsing certain
binaries. If a user or automated system were tricked into processing a
specially crafted binary, a remote attacker could use this issue to cause
libiberty to crash, resulting in a denial of service. (CVE-2016-4491)

OSVersionArchitecturePackageVersionFilename
Ubuntu17.04noarchlibiberty-dev< 20161220-1ubuntu0.2UNKNOWN
Ubuntu16.04noarchlibiberty-dev< 20160215-1ubuntu0.2UNKNOWN
Ubuntu14.04noarchlibiberty-dev< 20131116-1ubuntu0.2UNKNOWN

Related

openvas 15
nessus 10
mageia 5
ubuntu 3
osv 2
debian 1
cloudfoundry 1
ubuntucve 10
prion 9
cve 9
redhatcve 3
f5 1
debiancve 9
veracode 9
zdt 1
cloudlinux 2
ibm 1
openvas
openvas
Ubuntu: Security Advisory (USN-3337-1)
2017-06-22 00:00:00
Mageia: Security Advisory (MGASA-2017-0222)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-3368-1)
2017-07-27 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : Valgrind vulnerabilities (USN-3337-1)
2017-06-22 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : libiberty vulnerabilities (USN-3368-1)
2017-07-27 00:00:00
Debian DLA-552-1 : binutils security update
2016-07-19 00:00:00
mageia
mageia
Updated valgrind packages fix security vulnerabilities
2017-07-28 21:12:15
Updated gdb packages fix security vulnerability
2018-01-03 17:22:14
Updated binutils packages fix security vulnerability
2018-01-03 17:22:14
ubuntu
ubuntu
Valgrind vulnerabilities
2017-06-21 00:00:00
gdb vulnerabilities
2017-07-26 00:00:00
GNU binutils vulnerabilities
2021-07-21 00:00:00
osv
osv
binutils - security update
2016-07-18 00:00:00
binutils vulnerabilities
2021-07-21 13:08:04
debian
debian
[SECURITY] [DLA 552-1] binutils security update
2016-07-18 08:45:05
cloudfoundry
cloudfoundry
USN-3367-1: gdb vulnerabilities | Cloud Foundry
2017-08-04 00:00:00
ubuntucve
ubuntucve
CVE-2016-4488
2017-02-24 00:00:00
CVE-2016-4490
2017-02-24 00:00:00
CVE-2016-4493
2017-02-24 00:00:00
prion
prion
Stack overflow
2017-02-07 15:59:00
Integer overflow
2017-02-24 20:59:00
Integer overflow
2017-02-24 20:59:00
cve
cve
CVE-2016-4490
2017-02-24 20:59:00
CVE-2016-6131
2017-02-07 15:59:00
CVE-2016-4487
2017-02-24 20:59:00
redhatcve
redhatcve
CVE-2016-6131
2016-07-01 14:49:10
CVE-2016-4493
2016-05-05 12:18:43
CVE-2016-4492
2016-05-05 12:18:47
f5
f5
K55031185 : demangler in GNU Libiberty vulnerability CVE-2016-6131
2017-04-18 00:00:00
debiancve
debiancve
CVE-2016-6131
2017-02-07 15:59:00
CVE-2016-4490
2017-02-24 20:59:00
CVE-2016-4489
2017-02-24 20:59:00
veracode
veracode
Denial Of Service (DoS)
2020-09-21 06:35:12
Denial Of Service (DoS)
2020-09-21 06:31:46
Denial Of Service (DoS)
2020-09-21 06:19:33
zdt
zdt
GNU libiberty - Buffer Overflow Exploit
2017-07-28 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2018-18605, CVE-2019-12972, CVE-2016-4490, CVE-2018-6543, CVE-2018-19931, CVE-2018-10535, CVE-2019-17450, CVE-2018-7643, CVE-2016-4487, CVE-2016-4492, CVE-2018-20002, CVE-2018-1000876, CVE-2019-9073, CVE-2019-9075, CVE-2018-20671, CVE-2016-4488, CVE-2018-7568, CVE-2018-7642, CVE-2018-10373, CVE-2018-6323, CVE-2016-2226, CVE-2016-4493, CVE-2018-19932, CVE-2018-6759, CVE-2019-9077, CVE-2018-18607, CVE-2018-8945, CVE-2018-7208, CVE-2016-6131, CVE-2018-13033, CVE-2018-20623, CVE-2019-14444, CVE-2018-18309, CVE-2018-18606, CVE-2018-7569, CVE-2016-4489
2021-12-16 16:02:14
Fix of 36 CVEs
2021-12-27 16:08:07
ibm
ibm
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs
2023-03-08 18:05:21

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.026 Low

EPSS

Percentile

90.1%

JSON
Related for USN-3368-1
openvas15nessus10mageia5ubuntu3osv2debian1cloudfoundry1ubuntucve10prion9cve9redhatcve3f51debiancve9veracode9zdt1cloudlinux2ibm1