CVE-2019-14444: Integer Overflow
applyrelocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byteputlittleendian function in elfcomm.c) via an ELF file, as demonstrated by readelf.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14444?
CVE-2019-14444 is a vulnerability in GNU Binutils 2.32 that allows attackers to trigger a write access violation via an ELF file.
How does CVE-2019-14444 affect GNU Binutils?
CVE-2019-14444 affects GNU Binutils version 2.32 and earlier.
How can I fix CVE-2019-14444 in GNU Binutils?
To fix CVE-2019-14444 in GNU Binutils, update to version 2.32.51.20190813-1 or later.
Where can I find more information about CVE-2019-14444?
You can find more information about CVE-2019-14444 in the references provided: [sourceware.org](https://sourceware.org/bugzilla/show_bug.cgi?id=24829), [security.netapp.com](https://security.netapp.com/advisory/ntap-20190822-0002/), [usn.ubuntu.com](https://usn.ubuntu.com/4336-1/).
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-14444?
The Common Weakness Enumeration (CWE) ID for CVE-2019-14444 is CWE-190.