PT-2017-6412 · Gnu+3 · Gnu Binutils+3

Publicado 2016-04-11 · Atualizado 2024-06-15 · CVE-2014-9939

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.26

Description The issue is related to a stack buffer overflow that occurs when printing bad bytes in Intel Hex objects. This is due to a problem in the ihex.c file.

Recommendations For GNU Binutils versions prior to 2.26, update to version 2.26 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1319

ALT-PU-2017-1225

CVE-2014-9939

DLA-324-1

DLA-552-1

MGASA-2018-0034

MGASA-2019-0169

OPENSUSE-SU-2018_3223-1

OPENSUSE-SU-2024:10651-1

SUSE-SU-2017:3170-1

SUSE-SU-2017_3170-1

SUSE-SU-2018:3207-1

SUSE-SU-2018:3207-2

SUSE-SU-2018_3207-1

SUSE-SU-2018_3207-2

USN-3367-1

Produtos afetados

Alt Linux

Gnu Binutils

Suse

Ubuntu

Referências · 446

• https://suse.com/security/cve/CVE-2017-15996 · Nota
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=ld/NEWS;hb=refs/tags/binutils-2_32 · Nota
• https://suse.com/security/cve/CVE-2017-8396.html · Nota
• https://suse.com/security/cve/CVE-2017-9756 · Nota
• https://ubuntu.com/security/CVE-2016-4492 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-8945.html · Nota
• https://suse.com/security/cve/CVE-2017-7227 · Nota
• https://ubuntu.com/security/CVE-2016-4487 · Aviso do Fabricante
• https://bugzilla.suse.com/1057144 · Nota
• https://suse.com/security/cve/CVE-2020-16593 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=18987 · Nota
• https://suse.com/security/cve/CVE-2020-16592 · Nota
• https://suse.com/security/cve/CVE-2017-15939 · Nota
• https://sourceware.org/bugzilla/show_bug.cgi?id=22386 · Nota
• https://suse.com/security/cve/CVE-2017-12454 · Nota