PT-2017-6412 · Gnu+3 · Gnu Binutils+3

Published 2016-04-11 · Updated 2024-06-15 · CVE-2014-9939

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.26

Description The issue is related to a stack buffer overflow that occurs when printing bad bytes in Intel Hex objects. This is due to a problem in the ihex.c file.

Recommendations For GNU Binutils versions prior to 2.26, update to version 2.26 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2016-1319

ALT-PU-2017-1225

CVE-2014-9939

DLA-324-1

DLA-552-1

MGASA-2018-0034

MGASA-2019-0169

OPENSUSE-SU-2018_3223-1

OPENSUSE-SU-2024:10651-1

SUSE-SU-2017:3170-1

SUSE-SU-2017_3170-1

SUSE-SU-2018:3207-1

SUSE-SU-2018:3207-2

SUSE-SU-2018_3207-1

SUSE-SU-2018_3207-2

USN-3367-1

Affected Products

Alt Linux

Gnu Binutils

Suse

Ubuntu

References · 446

• https://ubuntu.com/security/CVE-2016-4492 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4487 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07766 · Security Note
• https://bdu.fstec.ru/vul/2023-07747 · Security Note
• https://bdu.fstec.ru/vul/2023-07730 · Security Note
• https://bdu.fstec.ru/vul/2023-07729 · Security Note
• https://ubuntu.com/security/CVE-2016-4491 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3367-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07725 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2226 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4490 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10651-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07727 · Security Note
• https://bdu.fstec.ru/vul/2023-07758 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4488 · Security Note