CVE-2019-1010204: Input Validation
First published: Tue Jul 23 2019(Updated: )
GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.
Credit: josh@bress.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU Binutils | >=2.21<=2.31.1 | |
| GNU binutils gold | >=1.11<=1.16 | |
| Netapp Hci Management Node | ||
| Netapp Solidfire |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-1010204.
What is the severity rating of CVE-2019-1010204?
The severity rating of CVE-2019-1010204 is 5.5 (Medium).
Which software versions are affected by CVE-2019-1010204?
CVE-2019-1010204 affects GNU binutils gold versions 1.11 to 1.16 and GNU binutils versions 2.21 to 2.31.1.
What is the impact of CVE-2019-1010204?
The impact of CVE-2019-1010204 is denial of service.
How can I fix CVE-2019-1010204?
There are no known fixes or patches available for this vulnerability at the moment. It is recommended to follow the recommendations provided by the software vendor or project maintainers.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gnu
- canonical/gnu binutils
- version/gnu binutils/2.21
- version/gnu binutils/2.31.1
- canonical/gnu binutils gold
- version/gnu binutils gold/1.11
- version/gnu binutils gold/1.16
- vendor/netapp
- canonical/netapp hci management node
- canonical/netapp solidfire