system/binutils: multiple vulnerabilities
| Bugzilla ID | 116 |
| Alias(es) | CVE-2019-12972, CVE-2019-14250, CVE-2019-9070, CVE-2019-9071, CVE-2019-9073, CVE-2019-9074, CVE-2019-9075, CVE-2019-9077 |
| Reporter | Max Rees (sroracle) |
| Assignee | Max Rees (sroracle) |
| Reported | 2019-07-24 19:14:25 -0500 |
| Modified | 2019-08-03 16:10:41 -0500 |
| Status | RESOLVED FIXED |
| Version | 1.0-BETA3 |
| Hardware | Adélie Linux / All |
| Importance | --- / normal |
| See also |
https://bts.adelielinux.org/show_bug.cgi?id=108 https://bts.adelielinux.org/show_bug.cgi?id=109 |
Description
CVE-2019-9070: https://nvd.nist.gov/vuln/detail/CVE-2019-9070
An issue was discovered in GNU libiberty, as distributed in GNU
Binutils 2.32. It is a heap-based buffer over-read in d_expression_1
in cp-demangle.c after many recursive calls.
CVE-2019-9071: https://nvd.nist.gov/vuln/detail/CVE-2019-9071
An issue was discovered in GNU libiberty, as distributed in GNU
Binutils 2.32. It is a stack consumption issue in
d_count_templates_scopes in cp-demangle.c after many recursive calls.
CVE-2019-9073: https://nvd.nist.gov/vuln/detail/CVE-2019-9073
An issue was discovered in the Binary File Descriptor (BFD) library
(aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted
excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.
CVE-2019-9074: https://nvd.nist.gov/vuln/detail/CVE-2019-9074
An issue was discovered in the Binary File Descriptor (BFD) library
(aka libbfd), as distributed in GNU Binutils 2.32. It is an
out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when
called from pex64_get_runtime_function in pei-x86_64.c.
CVE-2019-9075: https://nvd.nist.gov/vuln/detail/CVE-2019-9075
An issue was discovered in the Binary File Descriptor (BFD) library
(aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based
buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
CVE-2019-9077: https://nvd.nist.gov/vuln/detail/CVE-2019-9077
An issue was discovered in GNU Binutils 2.32. It is a heap-based
buffer overflow in process_mips_specific in readelf.c via a malformed
MIPS option section.