remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has binutils packages installed that are affected by multiple vulnerabilities:

  - The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and     possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect     functions are called during an attempt to release memory. The issue can be addressed by better input     validation in the bfd_generic_archive_p function in bfd/archive.c. (CVE-2017-12448)

  - remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.
    (CVE-2018-12934)

  - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a     NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.
    (CVE-2018-17794)

  - The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote     attackers to cause a denial of service (malloc called with the result of an integer-overflowing     calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
    (CVE-2018-18483)

  - A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the     Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because
    _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially     crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld. (CVE-2018-18605)

  - An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU     Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h     because the number of program headers is not restricted. (CVE-2018-19931)

  - apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to     trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as     demonstrated by readelf. (CVE-2019-14444)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has binutils packages installed that are affected by multiple vulnerabilities:

  - The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and     possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect     functions are called during an attempt to release memory. The issue can be addressed by better input     validation in the bfd_generic_archive_p function in bfd/archive.c. (CVE-2017-12448)

  - remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.
    (CVE-2018-12934)

  - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a     NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.
    (CVE-2018-17794)

  - The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote     attackers to cause a denial of service (malloc called with the result of an integer-overflowing     calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
    (CVE-2018-18483)

  - A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the     Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because
    _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially     crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld. (CVE-2018-18605)

  - An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU     Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h     because the number of program headers is not restricted. (CVE-2018-19931)

  - apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to     trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as     demonstrated by readelf. (CVE-2019-14444)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a heap-based     buffer over-read in d_expression_1 in cp-demangle.c     after many recursive calls.(CVE-2019-9070)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a stack     consumption issue in d_count_templates_scopes in     cp-demangle.c after many recursive     calls.(CVE-2019-9071)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32.
    simple_object_elf_match in simple-object-elf.c does not     check for a zero shstrndx value, leading to an integer     overflow and resultant heap-based buffer     overflow.(CVE-2019-14250)

  - GNU gdb All versions is affected by: Buffer Overflow -     Out of bound memory access. The impact is: Deny of     Service, Memory Disclosure, and Possible Code     Execution. The component is: The main gdb module. The     attack vector is: Open an ELF for debugging. The fixed     version is: Not fixed yet.(CVE-2019-1010180)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an integer overflow leading to a     SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as     demonstrated by nm.(CVE-2019-17451)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an attempted excessive memory     allocation in _bfd_elf_slurp_version_tables in     elf.c.(CVE-2019-9073)

  - apply_relocations in readelf.c in GNU Binutils 2.32     contains an integer overflow that allows attackers to     trigger a write access violation (in     byte_put_little_endian function in elfcomm.c) via an     ELF file, as demonstrated by readelf.(CVE-2019-14444)

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the binutils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

  - The get_count function in cplus-dem.c in GNU libiberty,     as distributed in GNU Binutils 2.31, allows remote     attackers to cause a denial of service (malloc called     with the result of an integer-overflowing calculation)     or possibly have unspecified other impact via a crafted     string, as demonstrated by c++filt.(CVE-2018-18483)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. There is a heap-based buffer over-read     in _bfd_doprnt in bfd.c because elf_object_p in     elfcode.h mishandles an e_shstrndx section of type     SHT_GROUP by omitting a trailing '\0'     character.(CVE-2019-12972)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
160803	NewStart CGSL CORE 5.05 / MAIN 5.05 : binutils Multiple Vulnerabilities (NS-SA-2022-0025)	Nessus	NewStart CGSL Local Security Checks	high
154500	NewStart CGSL CORE 5.04 / MAIN 5.04 : binutils Multiple Vulnerabilities (NS-SA-2021-0096)	Nessus	NewStart CGSL Local Security Checks	high
151919	Ubuntu 16.04 ESM : GNU binutils vulnerabilities (USN-4336-2)	Nessus	Ubuntu Local Security Checks	critical
142507	EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2020-2463)	Nessus	Huawei Local Security Checks	high
142083	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-2239)	Nessus	Huawei Local Security Checks	high
140839	EulerOS 2.0 SP3 : binutils (EulerOS-SA-2020-2072)	Nessus	Huawei Local Security Checks	high
140354	EulerOS Virtualization for ARM 64 3.0.2.0 : binutils (EulerOS-SA-2020-1984)	Nessus	Huawei Local Security Checks	high
137477	EulerOS 2.0 SP2 : binutils (EulerOS-SA-2020-1635)	Nessus	Huawei Local Security Checks	high
135966	Ubuntu 18.04 LTS : GNU binutils vulnerabilities (USN-4336-1)	Nessus	Ubuntu Local Security Checks	critical
135398	Ubuntu 16.04 LTS / 18.04 LTS : libiberty vulnerabilities (USN-4326-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2018-12934

high

Tenable Plugins

high

high

critical

high

high

high

high

high

critical

high