{
  "fix": "libbinutils 2.30-21ubuntu1~18.04.3",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libbinutils-2.30-21ubuntu1-18.04.3",
  "summary": "libbinutils 2.30-21ubuntu1~18.04.3, released October 10, 2019, fixes 44 CVEs in libbinutils. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "libbinutils 2.30-21ubuntu1~18.04.3 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2019-10-10T10:15:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 44 CVEs, none high severity",
  "supported": false,
  "cveCount": 44,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.06203,
  "maxCvss": 6.5,
  "appliesTo": [
    {
      "product": "libbinutils",
      "productUrl": "https://patchblox.com/security/product/linux/libbinutils",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-21ubuntu1~18.04.3",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-12698",
      "url": "https://patchblox.com/security/cve/CVE-2018-12698",
      "title": "binutils: demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger e...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.06203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-12697",
      "url": "https://patchblox.com/security/cve/CVE-2018-12697",
      "title": "binutils: A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.04825,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-12699",
      "url": "https://patchblox.com/security/cve/CVE-2018-12699",
      "title": "binutils-sh4-linux-gnu: finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.04533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-12934",
      "url": "https://patchblox.com/security/cve/CVE-2018-12934",
      "title": "binutils: remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger exce...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.03293,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10373",
      "url": "https://patchblox.com/security/cve/CVE-2018-10373",
      "title": "binutils-i686-kfreebsd-gnu: concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.03282,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-13033",
      "url": "https://patchblox.com/security/cve/CVE-2018-13033",
      "title": "binutils: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers t...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.02947,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17450",
      "url": "https://patchblox.com/security/cve/CVE-2019-17450",
      "title": "binutils: ELSA-2020-4465: binutils security update (LOW)",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 6.5,
      "epss": 0.02752,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18483",
      "url": "https://patchblox.com/security/cve/CVE-2018-18483",
      "title": "binutils: The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.02458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17451",
      "url": "https://patchblox.com/security/cve/CVE-2019-17451",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.02396,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-14250",
      "url": "https://patchblox.com/security/cve/CVE-2019-14250",
      "title": "binutils: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02325,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18605",
      "url": "https://patchblox.com/security/cve/CVE-2018-18605",
      "title": "binutils: A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary Fil...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18606",
      "url": "https://patchblox.com/security/cve/CVE-2018-18606",
      "title": "binutils: An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka lib...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18607",
      "url": "https://patchblox.com/security/cve/CVE-2018-18607",
      "title": "binutils: An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd),...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10372",
      "url": "https://patchblox.com/security/cve/CVE-2018-10372",
      "title": "binutils: process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.02301,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-20651",
      "url": "https://patchblox.com/security/cve/CVE-2018-20651",
      "title": "binutils-mipsisa64r6el-linux-gnuabin32: A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.02247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10535",
      "url": "https://patchblox.com/security/cve/CVE-2018-10535",
      "title": "binutils-mipsisa64r6el-linux-gnuabi64: The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.02133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-19932",
      "url": "https://patchblox.com/security/cve/CVE-2018-19932",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils thro...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01993,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-8945",
      "url": "https://patchblox.com/security/cve/CVE-2018-8945",
      "title": "binutils: The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01987,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-9077",
      "url": "https://patchblox.com/security/cve/CVE-2019-9077",
      "title": "binutils: An issue was discovered in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01976,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-20671",
      "url": "https://patchblox.com/security/cve/CVE-2018-20671",
      "title": "binutils-multiarch: load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability th...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01973,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-12641",
      "url": "https://patchblox.com/security/cve/CVE-2018-12641",
      "title": "binutils: An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01965,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18484",
      "url": "https://patchblox.com/security/cve/CVE-2018-18484",
      "title": "binutils: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01884,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17794",
      "url": "https://patchblox.com/security/cve/CVE-2018-17794",
      "title": "binutils: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01868,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18309",
      "url": "https://patchblox.com/security/cve/CVE-2018-18309",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-20002",
      "url": "https://patchblox.com/security/cve/CVE-2018-20002",
      "title": "binutils: The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as dis...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01819,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-20623",
      "url": "https://patchblox.com/security/cve/CVE-2018-20623",
      "title": "binutils-powerpc64-linux-gnu: In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_arc...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01817,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-9071",
      "url": "https://patchblox.com/security/cve/CVE-2019-9071",
      "title": "binutils: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01805,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-12972",
      "url": "https://patchblox.com/security/cve/CVE-2019-12972",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01802,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10534",
      "url": "https://patchblox.com/security/cve/CVE-2018-10534",
      "title": "binutils-mipsel-linux-gnu: The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01784,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18700",
      "url": "https://patchblox.com/security/cve/CVE-2018-18700",
      "title": "binutils: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01686,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18701",
      "url": "https://patchblox.com/security/cve/CVE-2018-18701",
      "title": "binutils: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01686,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-9075",
      "url": "https://patchblox.com/security/cve/CVE-2019-9075",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01683,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-9070",
      "url": "https://patchblox.com/security/cve/CVE-2019-9070",
      "title": "binutils: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-19931",
      "url": "https://patchblox.com/security/cve/CVE-2018-19931",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils thro...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01606,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-9074",
      "url": "https://patchblox.com/security/cve/CVE-2019-9074",
      "title": "binutils-alpha-linux-gnu: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01556,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-14444",
      "url": "https://patchblox.com/security/cve/CVE-2019-14444",
      "title": "binutils: apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a w...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01494,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17360",
      "url": "https://patchblox.com/security/cve/CVE-2018-17360",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17358",
      "url": "https://patchblox.com/security/cve/CVE-2018-17358",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01326,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17359",
      "url": "https://patchblox.com/security/cve/CVE-2018-17359",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17985",
      "url": "https://patchblox.com/security/cve/CVE-2018-17985",
      "title": "binutils-m68k-linux-gnu: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01291,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-9073",
      "url": "https://patchblox.com/security/cve/CVE-2019-9073",
      "title": "binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-9138",
      "url": "https://patchblox.com/security/cve/CVE-2018-9138",
      "title": "binutils: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-1000876",
      "url": "https://patchblox.com/security/cve/CVE-2018-1000876",
      "title": "binutils-alpha-linux-gnu: binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_b...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.00651,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-12700",
      "url": "https://patchblox.com/security/cve/CVE-2018-12700",
      "title": "binutils: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER",
      "priority": "Routine",
      "severity": "Low",
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}