PT-2019-6395 · Gnu+4 · Gnu Binutils+4

Tfx

·

Publicado

2019-07-21

·

Atualizado

2024-06-15

·

CVE-2019-14444

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32
Description The issue is related to an integer overflow in the apply relocations function of the readelf.c component in GNU Binutils. This allows a remote attacker to cause a denial of service using a specially crafted ELF file. The exploitation can trigger a write access violation in the byte put little endian function in elfcomm.c.
Recommendations For GNU Binutils version 2.32, consider updating to a newer version that contains a fix for this issue. As a temporary workaround, restrict the use of the apply relocations function in readelf.c to minimize the risk of exploitation. Avoid using specially crafted ELF files that could trigger the integer overflow in the byte put little endian function in elfcomm.c.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2020-3352
ALT-PU-2020-3433
ALT-PU-2021-1230
BDU:2023-07807
CVE-2019-14444
OPENSUSE-SU-2020:1790-1
OPENSUSE-SU-2020:1804-1
OPENSUSE-SU-2020_1790-1
OPENSUSE-SU-2020_1804-1
OPENSUSE-SU-2024:10651-1
SUSE-SU-2020:3060-1
SUSE-SU-2020:3552-1
SUSE-SU-2021:3593-1
USN-4336-1
USN-4336-2

Produtos afetados

Alt Linux
Astra Linux
Gnu Binutils
Suse
Ubuntu