CVE-2019-9073 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables i...
MediumCVSS 5.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/binutils(Debian:12) | < 2.32.51.20190707-1 | 2.32.51.20190707-1 |
| debian/binutils(Debian:13) | < 2.32.51.20190707-1 | 2.32.51.20190707-1 |
| debian/binutils(Debian:14) | < 2.32.51.20190707-1 | 2.32.51.20190707-1 |
| GNU binutils | = 2.32 | No fix listed |
| netapp hci management node | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
References
- Debian Security Tracker CVE-2019-9073 vendor-advisory
- GLSA-202107-24 third-party-advisory vendor-advisory
- security.netapp.com patch third-party-advisory
- sourceware.org exploit issue-tracking third-party-advisory
- support.f5.com third-party-advisory
- USN-4336-1 third-party-advisory vendor-advisory