Red Hat Security AdvisoryRHSA-2019:2075
binutils security and bug fix update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) binutils-2.27-41.base.el7
- Red Hat Enterprise Linux Client Optional (v. 7) binutils-devel-2.27-41.base.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) binutils-2.27-41.base.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) binutils-devel-2.27-41.base.el7
- Red Hat Enterprise Linux Server (v. 7) binutils-2.27-41.base.el7, binutils-devel-2.27-41.base.el7, binutils-devel-2.27-41.base.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) binutils-2.27-41.base.el7, binutils-devel-2.27-41.base.el7
Fixes 3 records
Priority MEDIUM 41
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04825 · Published 2018-06-23 · Partial fix CWE-476
Priority LOW 35
binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00651 · Published 2018-12-20 · Partial fix CWE-190
Priority LOW 29
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01965 · Published 2018-06-22 · Partial fix CWE-400
