CVE-2016-4489

2017-02-2400:00:00

ubuntu.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.2%

JSON

Integer overflow in the gnu_special function in libiberty allows remote
attackers to cause a denial of service (segmentation fault and crash) via a
crafted binary, related to the “demangling of virtual tables.”

Bugs

Notes

Author	Note
mdeslaur	same binutils commit as CVE-2016-2226

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchbinutils< anyUNKNOWN
ubuntu16.04noarchbinutils< 2.26.1-1ubuntu1~16.04.8+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchbinutils-h8300-hms< anyUNKNOWN
ubuntu20.04noarchbinutils-h8300-hms< anyUNKNOWN
ubuntu22.04noarchbinutils-h8300-hms< anyUNKNOWN
ubuntu23.10noarchbinutils-h8300-hms< anyUNKNOWN
ubuntu24.04noarchbinutils-h8300-hms< anyUNKNOWN
ubuntu16.04noarchbinutils-h8300-hms< anyUNKNOWN
ubuntu16.04noarchgcc-arm-none-eabi< anyUNKNOWN
ubuntu18.04noarchgcc-h8300-hms< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	binutils	< any	UNKNOWN
ubuntu	16.04	noarch	binutils	< 2.26.1-1ubuntu1~16.04.8+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	18.04	noarch	binutils-h8300-hms	< any	UNKNOWN
ubuntu	20.04	noarch	binutils-h8300-hms	< any	UNKNOWN
ubuntu	22.04	noarch	binutils-h8300-hms	< any	UNKNOWN
ubuntu	23.10	noarch	binutils-h8300-hms	< any	UNKNOWN
ubuntu	24.04	noarch	binutils-h8300-hms	< any	UNKNOWN
ubuntu	16.04	noarch	binutils-h8300-hms	< any	UNKNOWN
ubuntu	16.04	noarch	gcc-arm-none-eabi	< any	UNKNOWN
ubuntu	18.04	noarch	gcc-h8300-hms	< any	UNKNOWN