system/binutils: multiple vulnerabilities
Bugzilla ID | 116 |
Alias(es) | CVE-2019-12972, CVE-2019-14250, CVE-2019-9070, CVE-2019-9071, CVE-2019-9073, CVE-2019-9074, CVE-2019-9075, CVE-2019-9077 |
Reporter | Max Rees (sroracle) |
Assignee | Max Rees (sroracle) |
Reported | 2019-07-24 19:14:25 -0500 |
Modified | 2019-08-03 16:10:41 -0500 |
Status | RESOLVED FIXED |
Version | 1.0-BETA3 |
Hardware | Adélie Linux / All |
Importance | --- / normal |
See also |
https://bts.adelielinux.org/show_bug.cgi?id=108 https://bts.adelielinux.org/show_bug.cgi?id=109 |
Description
CVE-2019-9070: https://nvd.nist.gov/vuln/detail/CVE-2019-9070
An issue was discovered in GNU libiberty, as distributed in GNU
Binutils 2.32. It is a heap-based buffer over-read in d_expression_1
in cp-demangle.c after many recursive calls.
CVE-2019-9071: https://nvd.nist.gov/vuln/detail/CVE-2019-9071
An issue was discovered in GNU libiberty, as distributed in GNU
Binutils 2.32. It is a stack consumption issue in
d_count_templates_scopes in cp-demangle.c after many recursive calls.
CVE-2019-9073: https://nvd.nist.gov/vuln/detail/CVE-2019-9073
An issue was discovered in the Binary File Descriptor (BFD) library
(aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted
excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.
CVE-2019-9074: https://nvd.nist.gov/vuln/detail/CVE-2019-9074
An issue was discovered in the Binary File Descriptor (BFD) library
(aka libbfd), as distributed in GNU Binutils 2.32. It is an
out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when
called from pex64_get_runtime_function in pei-x86_64.c.
CVE-2019-9075: https://nvd.nist.gov/vuln/detail/CVE-2019-9075
An issue was discovered in the Binary File Descriptor (BFD) library
(aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based
buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
CVE-2019-9077: https://nvd.nist.gov/vuln/detail/CVE-2019-9077
An issue was discovered in GNU Binutils 2.32. It is a heap-based
buffer overflow in process_mips_specific in readelf.c via a malformed
MIPS option section.