An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.

The remote host is affected by the vulnerability described in GLSA-202107-24 (Binutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Binutils. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a heap-based     buffer over-read in d_expression_1 in cp-demangle.c     after many recursive calls.(CVE-2019-9070)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a stack     consumption issue in d_count_templates_scopes in     cp-demangle.c after many recursive     calls.(CVE-2019-9071)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32.
    simple_object_elf_match in simple-object-elf.c does not     check for a zero shstrndx value, leading to an integer     overflow and resultant heap-based buffer     overflow.(CVE-2019-14250)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an attempted excessive memory     allocation in _bfd_elf_slurp_version_tables in     elf.c.(CVE-2019-9073)

  - apply_relocations in readelf.c in GNU Binutils 2.32     contains an integer overflow that allows attackers to     trigger a write access violation (in     byte_put_little_endian function in elfcomm.c) via an     ELF file, as demonstrated by readelf.(CVE-2019-14444)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a heap-based     buffer over-read in d_expression_1 in cp-demangle.c     after many recursive calls.(CVE-2019-9070)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32. It is a stack     consumption issue in d_count_templates_scopes in     cp-demangle.c after many recursive     calls.(CVE-2019-9071)

  - An issue was discovered in GNU libiberty, as     distributed in GNU Binutils 2.32.
    simple_object_elf_match in simple-object-elf.c does not     check for a zero shstrndx value, leading to an integer     overflow and resultant heap-based buffer     overflow.(CVE-2019-14250)

  - GNU gdb All versions is affected by: Buffer Overflow -     Out of bound memory access. The impact is: Deny of     Service, Memory Disclosure, and Possible Code     Execution. The component is: The main gdb module. The     attack vector is: Open an ELF for debugging. The fixed     version is: Not fixed yet.(CVE-2019-1010180)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an integer overflow leading to a     SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as     demonstrated by nm.(CVE-2019-17451)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an attempted excessive memory     allocation in _bfd_elf_slurp_version_tables in     elf.c.(CVE-2019-9073)

  - apply_relocations in readelf.c in GNU Binutils 2.32     contains an integer overflow that allows attackers to     trigger a write access violation (in     byte_put_little_endian function in elfcomm.c) via an     ELF file, as demonstrated by readelf.(CVE-2019-14444)

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the binutils package has been released.

ID	Name	Product	Family	Severity
157002	GLSA-202107-24 : Binutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
151919	Ubuntu 16.04 ESM : GNU binutils vulnerabilities (USN-4336-2)	Nessus	Ubuntu Local Security Checks	critical
142255	EulerOS 2.0 SP2 : binutils (EulerOS-SA-2020-2330)	Nessus	Huawei Local Security Checks	high
140839	EulerOS 2.0 SP3 : binutils (EulerOS-SA-2020-2072)	Nessus	Huawei Local Security Checks	high
135966	Ubuntu 18.04 LTS : GNU binutils vulnerabilities (USN-4336-1)	Nessus	Ubuntu Local Security Checks	critical
126474	Photon OS 3.0: Binutils PHSA-2019-3.0-0022	Nessus	PhotonOS Local Security Checks	medium
126194	Photon OS 1.0: Binutils PHSA-2019-1.0-0237	Nessus	PhotonOS Local Security Checks	medium
126179	Photon OS 2.0: Binutils PHSA-2019-2.0-0164	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2019-9073

medium

Tenable Plugins

high

critical

high

high

critical

medium

medium

medium