PT-2012-4773 · Gnu+1 · Binutils+1

Sang Kil Cha · Published 2012-09-05 · Updated 2025-03-25 · CVE-2012-3509

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions binutils version 2.22

Description The issue is related to multiple integer overflows in the objalloc alloc function and objalloc alloc macro, which can be exploited by remote attackers to cause a denial of service (crash) through vectors related to the addition of CHUNK HEADER SIZE to the length. This triggers a heap-based buffer overflow.

Recommendations For binutils version 2.22, consider applying a patch that fixes the integer overflows in the objalloc alloc function and objalloc alloc macro to prevent heap-based buffer overflows.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2012-3509

DLA-324-1

MGASA-2014-0346

SUSE-OU-2015:1803-1

USN-2496-1

Affected Products

Ubuntu

Binutils

References · 58

• https://osv.dev/vulnerability/UBUNTU-CVE-2012-3509 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0346 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-3509 · Vendor Advisory
• http://ubuntu.com/usn/USN-2496-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3509 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-3509 · Security Note
• https://osv.dev/vulnerability/CVE-2012-3509 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8737 · Security Note
• https://cve.org/CVERecord?id=CVE-2012-3509 · Security Note
• https://ubuntu.com/security/CVE-2014-8503 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8485 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2496-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8502 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8501 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8503 · Security Note