Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-14250

Опубликовано: 24 июл. 2019
Источник: debian

Описание

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
binutilsfixed2.33-1package

Примечания

  • https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90924

  • https://gcc.gnu.org/ml/gcc-patches/2019-07/msg01003.html

  • binutils not covered by security support

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 6 лет назад

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

CVSS3: 3.3
redhat
около 6 лет назад

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

CVSS3: 5.5
nvd
около 6 лет назад

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

CVSS3: 5.5
msrc
около 5 лет назад

Описание отсутствует

suse-cvrf
больше 3 лет назад

Security update for gcc48