# libbinutils 2.30-21ubuntu1~18.04.3: libbinutils 2.30-21ubuntu1~18.04.3 for Ubuntu 18.04.6 LTS (bionic)

libbinutils 2.30-21ubuntu1~18.04.3, released October 10, 2019, fixes 44 CVEs in libbinutils. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-libbinutils-2.30-21ubuntu1-18.04.3
- Platform: Linux
- Released: Oct 10, 2019
- Priority: Routine (Closes 44 CVEs, none high severity)
- CVEs: 44, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [libbinutils](https://patchblox.com/security/data/product/linux/libbinutils.md) | Ubuntu 18.04.6 LTS (bionic) | 2.30-21ubuntu1~18.04.3 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-12698](https://patchblox.com/security/data/cve/CVE-2018-12698.md) | Routine | binutils: demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger e... | n/a | 0.0620 |  |
| [CVE-2018-12697](https://patchblox.com/security/data/cve/CVE-2018-12697.md) | Routine | binutils: A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in... | n/a | 0.0483 |  |
| [CVE-2018-12699](https://patchblox.com/security/data/cve/CVE-2018-12699.md) | Routine | binutils-sh4-linux-gnu: finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow... | n/a | 0.0453 |  |
| [CVE-2018-12934](https://patchblox.com/security/data/cve/CVE-2018-12934.md) | Routine | binutils: remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger exce... | n/a | 0.0329 |  |
| [CVE-2018-10373](https://patchblox.com/security/data/cve/CVE-2018-10373.md) | Routine | binutils-i686-kfreebsd-gnu: concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils... | n/a | 0.0328 |  |
| [CVE-2018-13033](https://patchblox.com/security/data/cve/CVE-2018-13033.md) | Routine | binutils: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers t... | n/a | 0.0295 |  |
| [CVE-2019-17450](https://patchblox.com/security/data/cve/CVE-2019-17450.md) | Routine | binutils: ELSA-2020-4465: binutils security update (LOW) | 6.5 | 0.0275 |  |
| [CVE-2018-18483](https://patchblox.com/security/data/cve/CVE-2018-18483.md) | Routine | binutils: The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers... | n/a | 0.0246 |  |
| [CVE-2019-17451](https://patchblox.com/security/data/cve/CVE-2019-17451.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 | 6.5 | 0.0240 |  |
| [CVE-2019-14250](https://patchblox.com/security/data/cve/CVE-2019-14250.md) | Routine | binutils: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32 | n/a | 0.0233 |  |
| [CVE-2018-18605](https://patchblox.com/security/data/cve/CVE-2018-18605.md) | Routine | binutils: A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary Fil... | n/a | 0.0232 |  |
| [CVE-2018-18606](https://patchblox.com/security/data/cve/CVE-2018-18606.md) | Routine | binutils: An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka lib... | n/a | 0.0232 |  |
| [CVE-2018-18607](https://patchblox.com/security/data/cve/CVE-2018-18607.md) | Routine | binutils: An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd),... | n/a | 0.0232 |  |
| [CVE-2018-10372](https://patchblox.com/security/data/cve/CVE-2018-10372.md) | Routine | binutils: process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based... | n/a | 0.0230 |  |
| [CVE-2018-20651](https://patchblox.com/security/data/cve/CVE-2018-20651.md) | Routine | binutils-mipsisa64r6el-linux-gnuabin32: A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (... | n/a | 0.0225 |  |
| [CVE-2018-10535](https://patchblox.com/security/data/cve/CVE-2018-10535.md) | Routine | binutils-mipsisa64r6el-linux-gnuabi64: The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in... | n/a | 0.0213 |  |
| [CVE-2018-19932](https://patchblox.com/security/data/cve/CVE-2018-19932.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils thro... | n/a | 0.0199 |  |
| [CVE-2018-8945](https://patchblox.com/security/data/cve/CVE-2018-8945.md) | Routine | binutils: The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed... | n/a | 0.0199 |  |
| [CVE-2019-9077](https://patchblox.com/security/data/cve/CVE-2019-9077.md) | Routine | binutils: An issue was discovered in GNU Binutils 2.32 | n/a | 0.0198 |  |
| [CVE-2018-20671](https://patchblox.com/security/data/cve/CVE-2018-20671.md) | Routine | binutils-multiarch: load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability th... | n/a | 0.0197 |  |
| [CVE-2018-12641](https://patchblox.com/security/data/cve/CVE-2018-12641.md) | Routine | binutils: An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30 | n/a | 0.0197 |  |
| [CVE-2018-18484](https://patchblox.com/security/data/cve/CVE-2018-18484.md) | Routine | binutils: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 | n/a | 0.0188 |  |
| [CVE-2018-17794](https://patchblox.com/security/data/cve/CVE-2018-17794.md) | Routine | binutils: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31 | n/a | 0.0187 |  |
| [CVE-2018-18309](https://patchblox.com/security/data/cve/CVE-2018-18309.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 | n/a | 0.0182 |  |
| [CVE-2018-20002](https://patchblox.com/security/data/cve/CVE-2018-20002.md) | Routine | binutils: The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as dis... | n/a | 0.0182 |  |
| [CVE-2018-20623](https://patchblox.com/security/data/cve/CVE-2018-20623.md) | Routine | binutils-powerpc64-linux-gnu: In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_arc... | n/a | 0.0182 |  |
| [CVE-2019-9071](https://patchblox.com/security/data/cve/CVE-2019-9071.md) | Routine | binutils: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32 | n/a | 0.0181 |  |
| [CVE-2019-12972](https://patchblox.com/security/data/cve/CVE-2019-12972.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 | n/a | 0.0180 |  |
| [CVE-2018-10534](https://patchblox.com/security/data/cve/CVE-2018-10534.md) | Routine | binutils-mipsel-linux-gnu: The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka... | n/a | 0.0178 |  |
| [CVE-2018-18700](https://patchblox.com/security/data/cve/CVE-2018-18700.md) | Routine | binutils: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 | n/a | 0.0169 |  |
| [CVE-2018-18701](https://patchblox.com/security/data/cve/CVE-2018-18701.md) | Routine | binutils: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 | n/a | 0.0169 |  |
| [CVE-2019-9075](https://patchblox.com/security/data/cve/CVE-2019-9075.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 | n/a | 0.0168 |  |
| [CVE-2019-9070](https://patchblox.com/security/data/cve/CVE-2019-9070.md) | Routine | binutils: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32 | n/a | 0.0164 |  |
| [CVE-2018-19931](https://patchblox.com/security/data/cve/CVE-2018-19931.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils thro... | n/a | 0.0161 |  |
| [CVE-2019-9074](https://patchblox.com/security/data/cve/CVE-2019-9074.md) | Routine | binutils-alpha-linux-gnu: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 | n/a | 0.0156 |  |
| [CVE-2019-14444](https://patchblox.com/security/data/cve/CVE-2019-14444.md) | Routine | binutils: apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a w... | n/a | 0.0149 |  |
| [CVE-2018-17360](https://patchblox.com/security/data/cve/CVE-2018-17360.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 | n/a | 0.0134 |  |
| [CVE-2018-17358](https://patchblox.com/security/data/cve/CVE-2018-17358.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 | n/a | 0.0133 |  |
| [CVE-2018-17359](https://patchblox.com/security/data/cve/CVE-2018-17359.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31 | n/a | 0.0130 |  |
| [CVE-2018-17985](https://patchblox.com/security/data/cve/CVE-2018-17985.md) | Routine | binutils-m68k-linux-gnu: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31 | n/a | 0.0129 |  |
| [CVE-2019-9073](https://patchblox.com/security/data/cve/CVE-2019-9073.md) | Routine | binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 | n/a | 0.0110 |  |
| [CVE-2018-9138](https://patchblox.com/security/data/cve/CVE-2018-9138.md) | Routine | binutils: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30 | n/a | 0.0105 |  |
| [CVE-2018-1000876](https://patchblox.com/security/data/cve/CVE-2018-1000876.md) | Routine | binutils-alpha-linux-gnu: binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_b... | n/a | 0.0065 |  |
| [CVE-2018-12700](https://patchblox.com/security/data/cve/CVE-2018-12700.md) | Routine | binutils: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER | n/a | n/a |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.