Lucene search

K
ubuntuUbuntuUSN-366-1
HistoryOct 18, 2006 - 12:00 a.m.

binutils vulnerability

2006-10-1800:00:00
ubuntu.com
28

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.2%

Releases

  • Ubuntu 5.10

Details

A buffer overflow was discovered in gas (the GNU assembler). By
tricking an user or automated system (like a compile farm) into
assembling a specially crafted source file with gcc or gas, this could
be exploited to execute arbitrary code with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu5.10noarchbinutils< 2.16.1-2ubuntu6.3UNKNOWN
Ubuntu5.10noarchbinutils-static< 2.16.1-2ubuntu6.3UNKNOWN

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.2%