An update of the binutils package has been released.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has binutils packages installed that are affected by multiple vulnerabilities:

  - The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and     possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect     functions are called during an attempt to release memory. The issue can be addressed by better input     validation in the bfd_generic_archive_p function in bfd/archive.c. (CVE-2017-12448)

  - remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.
    (CVE-2018-12934)

  - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a     NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.
    (CVE-2018-17794)

  - The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote     attackers to cause a denial of service (malloc called with the result of an integer-overflowing     calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
    (CVE-2018-18483)

  - A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the     Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because
    _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially     crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld. (CVE-2018-18605)

  - An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU     Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h     because the number of program headers is not restricted. (CVE-2018-19931)

  - apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to     trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as     demonstrated by readelf. (CVE-2019-14444)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has binutils packages installed that are affected by multiple vulnerabilities:

  - The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and     possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect     functions are called during an attempt to release memory. The issue can be addressed by better input     validation in the bfd_generic_archive_p function in bfd/archive.c. (CVE-2017-12448)

  - remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.
    (CVE-2018-12934)

  - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a     NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.
    (CVE-2018-17794)

  - The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote     attackers to cause a denial of service (malloc called with the result of an integer-overflowing     calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
    (CVE-2018-18483)

  - A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the     Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because
    _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially     crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld. (CVE-2018-18605)

  - An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU     Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h     because the number of program headers is not restricted. (CVE-2018-19931)

  - apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to     trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as     demonstrated by readelf. (CVE-2019-14444)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
122014	Photon OS 1.0: Binutils PHSA-2019-1.0-0203	Nessus	PhotonOS Local Security Checks	2/7/2019	5/23/2022	medium
122027	Photon OS 2.0: Binutils PHSA-2019-2.0-0119	Nessus	PhotonOS Local Security Checks	2/7/2019	5/23/2022	medium
154500	NewStart CGSL CORE 5.04 / MAIN 5.04 : binutils Multiple Vulnerabilities (NS-SA-2021-0096)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	11/27/2023	high
151919	Ubuntu 16.04 ESM : GNU binutils vulnerabilities (USN-4336-2)	Nessus	Ubuntu Local Security Checks	7/21/2021	10/20/2023	critical
135398	Ubuntu 16.04 LTS / 18.04 LTS : libiberty vulnerabilities (USN-4326-1)	Nessus	Ubuntu Local Security Checks	4/10/2020	10/21/2023	high
135966	Ubuntu 18.04 LTS : GNU binutils vulnerabilities (USN-4336-1)	Nessus	Ubuntu Local Security Checks	4/24/2020	10/21/2023	critical
160803	NewStart CGSL CORE 5.05 / MAIN 5.05 : binutils Multiple Vulnerabilities (NS-SA-2022-0025)	Nessus	NewStart CGSL Local Security Checks	5/9/2022	10/30/2023	high

Detections

Analytics

Plugins Search

medium

medium

high

critical

high

critical

high