PT-2019-6400 · Gnu+4 · Gnu Binutils+4
Spinpx
·
Publicado
2019-02-19
·
Atualizado
2024-06-15
·
CVE-2019-9074
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.32
Description
The issue is related to an out-of-bounds read in the Binary File Descriptor (BFD) library, specifically in the
bfd getl32 function within libbfd.c, which is called from pex64 get runtime function in pei-x86 64.c. This can lead to a segmentation fault. The vulnerability can be exploited by a remote attacker to cause a denial of service.Recommendations
For GNU Binutils version 2.32, consider updating to a newer version that includes a fix for this issue. As a temporary workaround, restrict access to the
pex64 get runtime function in pei-x86 64.c to minimize the risk of exploitation. Avoid using the bfd getl32 function in libbfd.c until the issue is resolved.Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Gnu Binutils
Suse
Ubuntu