USN-5341-1

Dashboard / Vulnerabilities / USN-5341-1

USN-5341-1

Summary: binutils vulnerabilities

Details: It was discovered that GNU binutils incorrectly handled checks for memory allocation when parsing relocs in a corrupt file. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-17122) It was discovered that GNU binutils incorrectly handled certain corrupt DWARF debug sections. An attacker could possibly use this issue to cause GNU binutils to consume memory, resulting in a denial of service. (CVE-2021-3487) It was discovered that GNU binutils incorrectly performed bounds checking operations when parsing stabs debugging information. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-45078)

References: https://ubuntu.com/security/notices/USN-5341-1, https://ubuntu.com/security/CVE-2017-17122, https://ubuntu.com/security/CVE-2021-3487, https://ubuntu.com/security/CVE-2021-45078