An update of the binutils package has been released.

An update of the crash package has been released.

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K09092524 advisory.

    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from     pex64_get_runtime_function in pei-x86_64.c.(CVE-2019-9074)ImpactSuccessful exploitation of this     vulnerability could lead to disclosure of sensitive information, addition or modification of data, or     Denial of Service (DoS).

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
202858	Photon OS 2.0: Binutils PHSA-2019-2.0-0167	Nessus	PhotonOS Local Security Checks	7/22/2024	7/22/2024	medium
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	7/24/2024	8/20/2025	critical
184230	F5 Networks BIG-IP : Binutils vulnerability (K09092524)	Nessus	F5 Networks Local Security Checks	11/2/2023	10/15/2025	medium

Detections

Analytics

Plugins Search

medium

critical

medium