Linux · Ubuntu · Package update · October 10, 2019

binutils-source 2.30-21ubuntu1~18.04.3: binutils-source 2.30-21ubuntu1~18.04.3 for Ubuntu 18.04.6 LTS (bionic)

binutils-source 2.30-21ubuntu1~18.04.3, released October 10, 2019, fixes 44 CVEs in binutils-source. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
44
None rated Critical
Exploited
0
None reported
Highest CVSS
6.5
Base score, 0 to 10
Highest EPSS
0.0620
93rd percentile

Priority of the 44 CVEs

Patch now 0 Urgent 0 High 0 Routine 44

Fixed package versions

ProductReleaseFixed in
binutils-sourceUbuntu 18.04.6 LTS (bionic)2.30-21ubuntu1~18.04.3

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2018-12698 binutils: demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger e...n/a 0.0620 None reported
Routine CVE-2018-12697 binutils: A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in...n/a 0.0483 None reported
Routine CVE-2018-12699 binutils-sh4-linux-gnu: finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow...n/a 0.0453 None reported
Routine CVE-2018-12934 binutils: remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger exce...n/a 0.0329 None reported
Routine CVE-2018-10373 binutils-i686-kfreebsd-gnu: concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...n/a 0.0328 None reported
Routine CVE-2018-13033 binutils: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers t...n/a 0.0295 None reported
Routine CVE-2019-17450 binutils: ELSA-2020-4465: binutils security update (LOW)6.5 0.0275 None reported
Routine CVE-2018-18483 binutils: The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers...n/a 0.0246 None reported
Routine CVE-2019-17451 binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.326.5 0.0240 None reported
Routine CVE-2019-14250 binutils: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32n/a 0.0233 None reported
Routine CVE-2018-18605 binutils: A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary Fil...n/a 0.0232 None reported
Routine CVE-2018-18606 binutils: An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka lib...n/a 0.0232 None reported
Routine CVE-2018-18607 binutils: An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd),...n/a 0.0232 None reported
Routine CVE-2018-10372 binutils: process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based...n/a 0.0230 None reported
Routine CVE-2018-20651 binutils-mipsisa64r6el-linux-gnuabin32: A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (...n/a 0.0225 None reported
Routine CVE-2018-10535 binutils-mipsisa64r6el-linux-gnuabi64: The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in...n/a 0.0213 None reported
Routine CVE-2018-19932 binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils thro...n/a 0.0199 None reported
Routine CVE-2018-8945 binutils: The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...n/a 0.0199 None reported
Routine CVE-2019-9077 binutils: An issue was discovered in GNU Binutils 2.32n/a 0.0198 None reported
Routine CVE-2018-20671 binutils-multiarch: load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability th...n/a 0.0197 None reported
Routine CVE-2018-12641 binutils: An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30n/a 0.0197 None reported
Routine CVE-2018-18484 binutils: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31n/a 0.0188 None reported
Routine CVE-2018-17794 binutils: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31n/a 0.0187 None reported
Routine CVE-2018-18309 binutils: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31n/a 0.0182 None reported
Routine CVE-2018-20002 binutils: The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as dis...n/a 0.0182 None reported
Showing 1 to 25 of 44 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.