CVE-2019-9072 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.
MediumCVSS 5.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU binutils | = 2.32 | No fix listed |
| netapp hci management node | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
References
- gcc.gnu.org exploit issue-tracking third-party-advisory
- GLSA-202107-24 third-party-advisory vendor-advisory
- security.netapp.com patch third-party-advisory
- sourceware.org issue-tracking third-party-advisory
- sourceware.org exploit issue-tracking third-party-advisory
- support.f5.com third-party-advisory